+If you visit one of our revoked sites, you might not get an error message. Revocation checking in browsers varies pretty widely, and has historically not worked great. Today's state-of-the-art is [Firefox's CRLite](https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/), which is efficient and reliable. Ubuntu is deploying [upki](https://discourse.ubuntu.com/t/an-update-on-upki/77063), a Rustls project based on CRLite. We hope other browsers and operating systems follow suit. The upki project is a great example of a project [making use of](https://github.com/rustls/upki/tree/main/revoke-test) these revoked test certificates, too.
0 commit comments