search

adamdecaf / cert-manage

WIP x509 Certificate auditing CLI
Apache License 2.0
32 stars 6 forks source link

What's the current state of explicit key untrust in certificate stores? #178

Open adamdecaf opened 6 years ago

adamdecaf commented 6 years ago

I was thinking about implementing https://github.com/adamdecaf/cert-manage/issues/166 and reading the chromium blacklist about the case of sslip.io. It got me thinking.

What's the current state of revoking a public (or private) key in certificate stores? Can all stores even handle a key being deliberately marked as untrusted? Let's investigate that.