On 17 Dec 2013, at 11:35, Daniela Bauer <[log in to unmask]> wrote:
> The CRL revocation is a cron job that runs in the background, leaves a
> tiny footprint and does not require any extra hardware and/or
> re-configuring of services. It's an rpm I can pull out of a repo and
> install anywhere I like.
> I would all for it to have central banning done in a similar way :-)
It’s yet another case of implementations being driven by funding rather than requirements.
As you say, a central ban list that sites download periodically would be really
simple. Simple to use, but the downside is it would have been simple to implement,
and not something you could write papers about.
You could knock it up in an afternoon rather than spending years on it.
Andrew
|