[9] Revoking Intermediate Certificates: Introducing OneCRL | Mozilla Security Blog ( 版) <https://blog.mozilla.org/security/2015/03/03/revoking-intermediate-certificates-introducing-onecrl/>
[6] CA:ImprovingRevocation - MozillaWiki ( 版) <https://wiki.mozilla.org/CA:ImprovingRevocation>
[8] CA:RevocationPlan - MozillaWiki ( 版) <https://wiki.mozilla.org/CA:RevocationPlan>
[15] Firefox 37 Feature to Improve SSL/TLS Certificate Security ( 版) <http://www.eweek.com/security/firefox-37-feature-to-improve-ssltls-certificate-security.html>
[1] 1024809 – (OneCRL) Add Revoked Intermediate Certs to revocation list push mechanism ( ()) <https://bugzilla.mozilla.org/show_bug.cgi?id=1024809>
[2] gecko-dev/NSSCertDBTrustDomain.cpp at master · mozilla/gecko-dev ( ()) <https://github.com/mozilla/gecko-dev/blob/master/security/certverifier/NSSCertDBTrustDomain.cpp>
[3] gecko-dev/nsICertBlocklist.idl at master · mozilla/gecko-dev ( ()) <https://github.com/mozilla/gecko-dev/blob/master/security/manager/ssl/nsICertBlocklist.idl>
[4] gecko-dev/CertBlocklist.cpp at master · mozilla/gecko-dev ( ()) <https://github.com/mozilla/gecko-dev/blob/master/security/manager/ssl/CertBlocklist.cpp>
[5] >>4 Firefox のプロファイルのディレクトリーに revocations.txt
があります。現時点で7.31KBのファイルです。
[7] Firefox のプロファイルのディレクトリーに blocklist.xml
があります。 revocations.txt
はそのうちの certItems
要素の内容から生成されているようです。
[10] gecko-dev/test_cert_blocklist.js at master · mozilla/gecko-dev ( ()) <https://github.com/mozilla/gecko-dev/blob/master/security/manager/ssl/tests/unit/test_cert_blocklist.js>
[11] Collecting info about previously-revoked intermediate certs - Google グループ ( ()) <https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/VWEzxILcL28>
[12] 1435609 - Stop sending cert blocklist items as part of blocklist.xml / kinto-blocklist / etc. () <https://bugzilla.mozilla.org/show_bug.cgi?id=1435609>
[13] 1359428 - Remove preference to select OneCRL update mechanism () <https://bugzilla.mozilla.org/show_bug.cgi?id=1359428>
[14] 1224467 - Add a preference to select OneCRL update mechanism () <https://bugzilla.mozilla.org/show_bug.cgi?id=1224467>