mozilla / crlite

WebPKI-level Certificate Revocation via Multi-Level Bloom Filter Cascade
http://www.cs.umd.edu/~dml/papers/crlite_oakland17.pdf
Mozilla Public License 2.0
77 stars 6 forks source link

Intermediates collection should be a subset of the ICAs disclosed in CCADB #236

Closed jschanck closed 2 years ago

jschanck commented 2 years ago

Every entry in the intermediates collection in Remote Settings was, at one time, on a list provided to us by CCADB. Sometimes an intermediate drops off this list, but we keep the corresponding record in Remote Settings. This might be useful for intermediates preloading, but it's currently complicating the signoff logic for CRLite. We should remove entries from intermediates which are no longer on the list from CCADB.