New Certificate Revocation List Design Saves Bandwidth, Boosts Internet Security
A new way to share information about revoked certificates, called compact CRL, has been developed. By re-encoding revoked certificates and using a segmented list approach, the size of the certificate revocation list is greatly reduced. This means that less data needs to be downloaded by those checking certificate validity, saving bandwidth.