
4/17/2014 · Matthew Prince
What this post added
This post highlights the significant hidden costs and infrastructure burden associated with SSL certificate revocation, specifically in the context of the Heartbleed vulnerability. It details the technical mechanisms of OCSP and CRL, quantifies the bandwidth and financial costs for Certificate Authorities (CAs) during mass revocations, and emphasizes Cloudflare's capability to absorb and manage this load, thereby enabling faster responses to security threats.