---
title: "CRLite: Fast, private, and comprehensive certificate revocation checking in Firefox"
url: https://daily.dev/posts/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox-ahem1zsay
source_url: https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/
type: article
source: "Mozilla Hacks"
published: 2025-08-19T16:20:16.917Z
updated: 2026-08-24T06:55:03.853Z
tags: ["privacy", "firefox", "web-security"]
reading_time: 6
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# CRLite: Fast, private, and comprehensive certificate revocation checking in Firefox

**[Mozilla Hacks](https://daily.dev/sources/hacks)** · 6 min read · 0 upvotes · 0 comments

## Summary

Firefox has deployed CRLite, a revolutionary certificate revocation checking system that provides comprehensive coverage of all revoked certificates while maintaining user privacy. Unlike traditional OCSP methods that leak browsing activity, CRLite downloads compact encodings of revocation data locally, updating every 12 hours. The system uses advanced Clubcard data structures with Ribbon filters, achieving 1000x better bandwidth efficiency than traditional Certificate Revocation Lists while covering 100% of revocations compared to Chrome's 1% coverage. Firefox will disable OCSP for domain-validated certificates in version 142, eliminating privacy leaks and improving TLS handshake performance by removing 100ms delays.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://hacks.mozilla.org/2025/08/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox/>

## Similar posts on daily.dev

- [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments
- [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments
- [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments

---

Tags: [#privacy](https://daily.dev/tags/privacy), [#firefox](https://daily.dev/tags/firefox), [#web-security](https://daily.dev/tags/web-security)

[View this post on daily.dev](https://daily.dev/posts/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox-ahem1zsay)
