Chapter
OneCRL: A System for Emergency Certificate Revocation
25:01 - 27:46 (02:45)
OneCRL is a system developed by Mozilla for emergency revocation of individual or group certificates within 24 hours, ensuring Firefox users no longer trust those certificates. The system can be used to combat security threats efficiently.
Clips
Firefox has an emergency revocation system called OneCRL that can revoke individual certificates or an entire tree of certificates based on one intermediate, while Chrome uses certificate pinning to only accept certificates issued from Google's CA.
25:01 - 27:46 (02:45)
Certificate revocation
Summary
Firefox has an emergency revocation system called OneCRL that can revoke individual certificates or an entire tree of certificates based on one intermediate, while Chrome uses certificate pinning to only accept certificates issued from Google's CA.