Revocation in the SSL Jungle -- Mozilla Firefox
Channel: Mohammed Almeshekah
Date: 2015-10-06

Mohammed Almeshekah from the Security Engineering team at Mozilla presents "Revocation in the SSL Jungle".

There have been multiple initiatives that have emerged in the past couple of years to address some of the inherit limitation of the CA-based trust model and SSL certificates. One of the these limitations is the current revocation models. In this video Mohammed Almeshekah (@meshekah) discusses the current mess in revoking SSL/TLS certificates. Then he presents a proposal to address such limitations. The proposal is divided into two main phases; short-term solution and long-term solution.

For the full proposal check:
https://www.meshekah.com/research/publications_files/mozilla_ssl_revocation_prop.pdf

The slides used in the presentation can be accessed from here:
https://www.meshekah.com/invited-talks-and-presentat/revocation_presentation.pdf

The original video appeared aired and achieved at mozilla can be accessed from here:
https://air.mozilla.org/revocation-in-the-ssl-jungle/

The certificate crawler can be accessed from here:
https://github.com/meshekah/SSL_Certs