Internet's Certificate Revocation Practices Exposed: Urgent Need for Transparency Standard.
The Internet relies on X.509 certificates for trust, but sometimes these certificates need to be revoked. Currently, there is no standard way to transparently track revoked certificates. A study analyzed over 1 million revoked certificates, including those from Let's Encrypt, to understand revocation practices. The analysis showed that revocation statuses are short-lived, vary between different certificate authorities, and reveal biases in handling revoked certificates. This research suggests the need for a standard to make certificate revocation more transparent.