Having your computer check for certificate revocation on a server tells you if the certificate being used has been revoked by the certificate authority before it was set to expire. Internet Explorer ...

Stripping OCSP (Online Certificate Status Protocol) and CRL (certificate revocation list) checks from Google Chrome could have dangerous implications because it will turn Google into a single point of ...

Aggressive adware applications that break the trust between HTTPS (HTTP Secure) websites and users have been at the center of controversy lately. But over the past week, HTTPS interception flaws of ...

This article was originally published on Scott Helme's blog and is reprinted here with his permission. We have a little problem on the web right now and I can only see it becoming a larger concern as ...

Several CAs (Certificate Authorities) have formed an advocacy group called the CASC (Certificate Authority Security Council), which will focus on promoting new security standards, policies and best ...

Google plans to remove online certificate revocation checks from future versions of Chrome because it considers the process inefficient and slow. Browsers currently check if a website’s SSL ...

Certificates need to be revoked for all sorts of reasons, but the process is so slipshod, some propose an entirely new system. Why not just enforce existing rules instead? As much as I love public key ...

2014 seems to be the year of the great certificate revocation debate. Revocation was always a sore subject with cryptoheads, but the noise level on the issue shot up to 11 this spring with the news of ...