I don't really understand it, but sounds like a nifty advancement!
this post was submitted on 21 Aug 2025
11 points (100.0% liked)
Linux and Tech News
2171 readers
16 users here now
This is where all the News about Linux and Linux adjacent things goes. We'll use some of the articles here for the show! You can watch or listen at:
You can also get involved at our forum here on Lemmy:
Or just get the most recent episode of the show here:
founded 2 years ago
MODERATORS
Basically if a site's ssl certificate has been revoked by a Certificate Authority (due to fraud, shenanigans, etc...) Firefox will maintain a local list (~300kb) of all revoked certs. This way, if you visit a site with a revoked cert it will appear as untrustworthy
My hope is this stops, or slows, the shortening of certificate lifetimes. Currently the longest cert you can purchase is a 1 year cert, and google and apple are trying to force 90day, and in 2029 47 day lifetime certs. This is a headache for devices that need certs, but where cert renewals cannot be automated