Mozilla on CRLite


-
Introducing CRLite: All of the Web PKI’s revocations, compressed
CRLite is a technology proposed by a group of researchers at the IEEE Symposium on Security and Privacy 2017 that compresses revocation information so effectively that 300 megabytes of revocation data can become 1 megabyte. It accomplishes this by combining Certificate Transparency data and Internet scan results with cascading Bloom filters, building a data structure that is reliable, easy to verify, and easy to update.
Since December, Firefox Nightly has been shipping with with CRLite, collecting telemetry on its effectiveness and speed. As can be imagined, replacing a network round-trip with local lookups makes for a substantial performance improvement. Mozilla currently updates the CRLite dataset four times per day, although not all updates are currently delivered to clients.
-
The End-to-End Design of CRLite
CRLite is a technology to efficiently compress revocation information for the whole Web PKI into a format easily delivered to Web users. It addresses the performance and privacy pitfalls of the Online Certificate Status Protocol (OCSP) while avoiding a need for some administrative decisions on the relative value of one revocation versus another. For details on the background of CRLite, see our first post, Introducing CRLite: All of the Web PKI’s revocations, compressed.
To discuss CRLite’s design, let’s first discuss the input data, and from that we can discuss how the system is made reliable.
-
- Login or register to post comments
Printer-friendly version
- 2137 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
How to create bootable Ubuntu 20.04 on windows 10
I think so; a few weeks back, I was doing something on my Ubuntu 20.04. Suddenly my friend knocks on my door, and he was curiously peeking on my laptop screen. I asked what happen, Benhur?
Benhur replied, what are you doing on your laptop, It is totally different from my laptop screen, and It fascinated me. Will you tell me what it is?
| Audio/Video: LHS, Going Linux, and DistroTube
|
Security Leftovers
| Android Leftovers
|
Recent comments
4 hours 37 min ago
9 hours 43 min ago
9 hours 45 min ago
15 hours 44 min ago
16 hours 10 min ago
19 hours 28 min ago
20 hours 6 min ago
20 hours 24 min ago
20 hours 27 min ago
22 hours 47 min ago