There are two ways of checking the status of a digital certificate:-
- Offline Authentication (CRL)
- Online Authentication (OCSP, SCVP)
Several browsers (like Mozilla Firefox) have given up the use of CRL over OCSP.
OCSP and SCVP are susceptible to MITM attacks.
Then which method is used a primary means of checking the status of a digital certificate?