mozilla / crlite

WebPKI-level Certificate Revocation via Multi-Level Bloom Filter Cascade
http://www.cs.umd.edu/~dml/papers/crlite_oakland17.pdf
Mozilla Public License 2.0
70 stars 8 forks source link

moz_kinto_publisher should not read from settings-cdn #182

Closed jschanck closed 2 years ago

jschanck commented 2 years ago

The records on settings-cdn can be out of date, and if moz_kinto_publisher is run twice in quick succession this can cause it to publish duplicate records to Remote Settings. This happens in practice---new consistency checks found duplicate entries in the ct-logs and cert-revocations collections on the stage instance.