Closed stubzug closed 3 years ago
Separated the Disputed list from the Revoked list to avoid denial of service attacks for Orange vendors. In doing so, there no longer needs to be a check against the whitelist since we can do the whitelist check on the server side prior to adding the disputed entry into the blacklist.
In other words, a whitelisted key cannot be blacklisted so long as we reference the whitelist when entering keys into the blacklist. No need to code it.
Check keys for whitelist first, if true, skip blacklist check.