Cert Validation
====================

RFC9608
----------

No Revocation
- Short-live 不用撤销
- Long-live 没法更新


CRLite
---------

- `The End-to-End Design of CRLite <https://blog.mozilla.org/security/2020/01/09/crlite-part-2-end-to-end-design/>`_
- `CRLite: A Scalable System for Pushing All TLS Revocations to All Browsers <https://obj.umiacs.umd.edu/papers_for_stories/crlite_oakland17.pdf>`_

从CT log监控记录提取的精简版证书状态