mozilla / crlite

WebPKI-level Certificate Revocation via Multi-Level Bloom Filter Cascade
http://www.cs.umd.edu/~dml/papers/crlite_oakland17.pdf
Mozilla Public License 2.0
70 stars 8 forks source link

Enroll issuers with functioning but empty CRLs #225

Closed jschanck closed 2 years ago

jschanck commented 2 years ago

We currently only enroll an issuer if a) we've successfully downloaded all of their CRLs, and b) they've revoked at least one certificate through those CRLs. We should remove the second condition, as it causes unnecessary churn in the enrollment list.