Re: [Nmh-workers] TLS certificate validation

[Ken Hornstein]

>Like having 600+ root CA certificates *isn't* a false sense of security? :)

Hey, should we be checking CRLs as well?  I ask, because at work the CRLs
I have to deal with have only 5 million certificates on them ...

In seriousness, I wonder how often client software does that?  I know
OCSP responses can be cached, but still ...

--Ken