It’s better with a trade off. It removes the call-home to Apple, but adds the possibility of false positives for certificate revocation.
Is this in fact the trade-off we’re considering, or am I misunderstanding?
Is this in fact the trade-off we’re considering, or am I misunderstanding?
The other idea is that because Apple knows all existing certificates, they could conceivably construct filters that have no false positives for those existing certificates... sort of like construction of a perfect hash.