Reply To: Twitt-arrrr!
@gbasden: Interesting! I’m more surprised it worked for other devices than it didn’t work for IOS. I hope it doesn’t mean those other devices aren’t checking for current CRLs! Rfc5280 is huge and I definitely haven’t read the whole thing, but I don’t think it actually mandates how or when clients should check for updated CRLs, or what they should do if they can’t get one. It just says they should check for them sometimes. And when the spec doesn’t specify you can’t count on anything.