Cert revocation is critical to avoid malware. This shows why CRLs are still better than OCSP.