An End-to-End Measurement of Certificate Revocation in the Web's PKI
Yabing Liu, Will Tome, Liang Zhang, David Choffnes, Dave Levin, Bruce MacDowell Maggs, Alan Mislove, Aaron Schulman, Christo Wilson · 2015
Critical to the security of any public key infrastructure (PKI) is the ability to revoke previously issued certificates. While the overall SSL ecosystem is well-studied, the frequency with which certificates are revoked and the circumstances under which clients (e.g., browsers) check whether certificates are revoked are still not well-understood.