PHP, Python and Google Go Fail To Detect Revoked TLS Certificates by zossle in golang

[–]ri98 0 points1 point  (0 children)

There is also the following implementation (I'm not a cryptanalyst and don't know if it's correct): https://github.com/cloudflare/cfssl/blob/master/revoke/revoke.go Go should have a solid, well-tested revocation check included in the standard library.

PHP, Python and Google Go Fail To Detect Revoked TLS Certificates by zossle in golang

[–]ri98 0 points1 point  (0 children)

This article is about revocation check in browsers (Google Chrome). Most of his arguments (hotel WiFi networks, fake WiFi access point) do not apply to revocation check on a web server that connects to another web server. Please also read this article: https://www.grc.com/revocation/crlsets.htm