[SSL Observatory] Adding CRLs to the Observatory?

Peter Gutmann pgut001 at cs.auckland.ac.nz
Sat Mar 19 19:55:56 PDT 2011


Jacob Appelbaum <jacob at appelbaum.net> writes:

>In my quest to find CRLs, I've received a patch to add a number of previously
>unknown CRLs:
>
>https://github.com/okoeroo/crlwatch/commit/59bcfeb42252563614572e5aa35bdca7751c212d#commitcomment-307742

Just out of interest, where are these coming from?  I imagine you can mine the
cert database for CRLDPs, but if these are from another source should they be
regarded as "visible" for observatory purposes?  If a CRL gets issued in a
tall forest and no-one sees it, does it revoke a cert?

Peter.



More information about the Observatory mailing list