You mean you and Chrome stopped supporting normal CRLs and OCSP, replacing (for normal users) these distributed-trust technologies with central lists controlled by browsers

▲

bawolff 5 hours ago | parent [-]

There is a good reason they did. CRL and especially OCSP are both terrible and not particularly effective

	▲	quotemstr 2 hours ago \| parent [-]
		OCSP stapling works fine technically, which is one reason it's still available in both browsers via enterprise policy. LE dropping support for it and browsers having insufficient courage to hard-fail doesn't make the model broken. It instead makes the ecosystem broken. Just another step towards a tiny number of browser vendors and infrastructure companies controlling the internet.