CRLite in Firefox. Fast, private and secure (pick three)

“Firefox is now the first and the only browser to deploy fast and comprehensive certificate revocation checking that does not reveal your browsing activity to anyone (not even to Mozilla).”

Yes, these are the sort of features we want to see. Improvements to the core of how a browser operates. Firefox as THE reference implementation of a quality web standards compliant browser.

More in-depth read: https://hacks.mozilla.org/2025/08/crlite-fast-private-and-co...

Discussed here:

CRLite: Certificate Revocation Checking in Firefox - https://news.ycombinator.com/item?id=44953282 - Aug 2025 (5 comments)

> our brand new certificate revocation system known as CRLite.

> CRLite makes your browsing faster, more private, and more secure, and is a significant advancement to the state of the art for encryption on the internet.

> ..CRLite represents a multiyear effort to deliver this vision with a comprehensive system that operates entirely on-device.

How does it work? Does this use Bloom filters?

Nope. A variation on Ribbon filters (https://engineering.fb.com/2021/07/09/core-infra/ribbon-filt...). See https://hacks.mozilla.org/2025/08/crlite-fast-private-and-co....