Firefox's CRLite: Faster, More Private Certificate Revocation Checking

2025-08-19
Firefox's CRLite: Faster, More Private Certificate Revocation Checking

Firefox is the first browser to implement fast and comprehensive certificate revocation checking without revealing user browsing activity. Previously, the OCSP protocol leaked user privacy. Firefox's new CRLite mechanism solves this by periodically downloading a compact encoding of revoked certificates, storing and updating it locally. CRLite is a thousand times more bandwidth-efficient than traditional CRLs and significantly improves TLS handshake times. Firefox will disable OCSP in version 142, further enhancing user privacy and performance.

Read more

Mozilla's Thrilling Rewrite of Firefox's Crash Reporting Backend in Rust

2025-03-19
Mozilla's Thrilling Rewrite of Firefox's Crash Reporting Backend in Rust

Mozilla replaced its C++-based google-breakpad with a pure-Rust implementation, rust-minidump, for Firefox's crash processing backend. After rigorous unit testing, integration testing, and production deployment, rust-minidump launched, boasting double the speed and improved reliability. The author details the challenges faced and the extensive testing methods employed to ensure robustness, culminating in a successful launch. The article is split into two parts: part one covers the background and testing process, while part two will detail the subsequent fuzzing results.

Read more
Development Crash Reporting