Third party use of CRLset

[Niklas Bachmaier]

Hi all

I'm working for a big managed security provider. We would like to benefit from the CRLset as a means of improving our certificate revocation checking. 

Using the crl-set tools I could download the CRLset. My question is if there is a license on the CRLset or if we are free to use it? Further I'm wondering if Google has already thought about third party users and provides another way of getting the most recent version of CRLset than getting clients2.google.com/service/update2/crx and comparing if the content has changed?

Thanks a lot already for any feedback on this!

Niklas

[Umesh Sirsiwal]

Hi Google,

I have the same question. I am working on a project where CRLset will be extremely useful. Is CRLSet usable by 3rd parties?

-Umesh

[agl]

On Tuesday, November 21, 2017 at 11:00:19 PM UTC-8, Umesh Sirsiwal wrote:

I have the same question. I am working on a project where CRLset will be extremely useful. Is CRLSet usable by 3rd parties?

Necessary counsel is unavailable at the moment due to the holidays, so I cannot answer the licensing question.

I will warn, however, that the format and structure of the CRLSet may change at any time. For example, we are considering refocusing it only on intermediates as part of a longer-term plan around OCSP Must-Staple.

Cheers

AGL

[Umesh Sirsiwal]

Thanks agl,

We will enforce OCSP Must-Staple. If Must-Staple become more widely used, it disappearing from CRLSet will not be a problem for us. However, change in format can become a problem. I suppose can can adapt to changes if there is some advanced notice.

Cheers

-Umesh

 

Cheers

AGL

[umesh sirsiwal]

Hey AGL,

I am just wondering if you were able to catch up with the counsel regarding the licensing question.

-Umesh

 

--
--
Chromium Discussion mailing list: chromium...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-discuss

---
You received this message because you are subscribed to a topic in the Google Groups "Chromium-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/a/chromium.org/d/topic/chromium-discuss/wfnqnXmePsA/unsubscribe.
To unsubscribe from this group and all its topics, send an email to chromium-discu...@chromium.org.

[Adam Langley]

On Wed, Nov 29, 2017 at 2:04 PM, umesh sirsiwal <ume...@gmail.com> wrote:

I am just wondering if you were able to catch up with the counsel regarding the licensing question.

We are not offering a license for the CRLSets at this time. We also don't commit to providing any notification if the format of the CRLSets changes in the future.

Since CRLSets were created, we've built a fair amount of Certificate Transparency. Thus it's now much easier for anyone to get a global view of issued certificates, applicable CRLs etc. Based on that, replicating the contents of the CRLSet shouldn't be too hard.

Cheers

AGL 

[umesh sirsiwal]

Thanks for your feedback AGL.

-Umesh

[R Melton]

hey, can someone tell me if there's any documentation for the CRLSet API used in https://github.com/agl/crlset-tools ?

thanks,

Rod