Title: Chrome isn&#x27;t checking revocation lists anymore (source: https:&#x2F;&#x2F;www.imperialviolet.org&#x2F;2012&#x2F;02&#x2F;05&#x2F;crlsets.html) so for everyone reissuing keys today, their sites are still vulnerable for Chrome users, right?<p>I checked Google&#x27;s own (custom) CRL and they don&#x27;t have any serials from Comodo or Verisign&#x27;s revocation lists, but they do have some from GoDaddy. Verified with https:&#x2F;&#x2F;github.com&#x2F;agl&#x2F;crlset-tools.<p>Update: Added Firefox to title based on mbrubeck&#x27;s findings.
Upvote: