Re: if Google's private keys really WERE stolen...
(I think browsers are better about this than they were ten years ago.)
They may be better, but the CRL and OCSP mechanisms are still fundamentally broken. They help, but they don't help much.
Biting the hand that feeds IT © 1998–2019