Confirmed users, Administrators
5,526
edits
CA:ImprovingRevocation: Difference between revisions
→Problems to Solve
| Line 14: | Line 14: | ||
Here are some of the issues that we hope to address very soon. | Here are some of the issues that we hope to address very soon. | ||
* Currently revocation of intermediate certificates is only checked during EV validation. Sadly, the intermediates we do check revocation for (EV) are the ones that are the least likely to cause our users security problems. | * Currently revocation of intermediate certificates is only checked during EV validation. Sadly, the intermediates we do check revocation for (EV) are the ones that are the least likely to cause our users security problems. | ||
* The CA learns the IP address, location, a subset of the user's browsing history, and other sensitive information about the user through the OCSP to its servers. | * The CA learns the IP address, location, a subset of the user's browsing history, and other sensitive information about the user through the OCSP to its servers. | ||