Firefox's CRLite: Faster, More Private Certificate Revocation Checking

Firefox is the first browser to implement fast and comprehensive certificate revocation checking without revealing user browsing activity. Previously, the OCSP protocol leaked user privacy. Firefox's new CRLite mechanism solves this by periodically downloading a compact encoding of revoked certificates, storing and updating it locally. CRLite is a thousand times more bandwidth-efficient than traditional CRLs and significantly improves TLS handshake times. Firefox will disable OCSP in version 142, further enhancing user privacy and performance.
Read more