{"id":81467,"date":"2025-08-19T09:04:45","date_gmt":"2025-08-19T16:04:45","guid":{"rendered":"https:\/\/blog.mozilla.org\/?p=81467"},"modified":"2025-08-19T09:22:36","modified_gmt":"2025-08-19T16:22:36","slug":"crlite","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/","title":{"rendered":"Fast, private and secure (pick three): Introducing CRLite in Firefox"},"content":{"rendered":"\n<p>We are pleased to announce that Firefox 142 will begin production usage of our brand new certificate revocation system known as CRLite. CRLite makes your browsing faster, more private, and more secure, and is a significant advancement to the state of the art for encryption on the internet.<\/p>\n\n\n\n<p>Every day, billions of people rely on HTTPS to securely encrypt their communication with websites. This core protocol ensures both that you are communicating with the right website and that other parties can\u2019t spy on what you\u2019re doing. To make this work, websites obtain <em>certificates<\/em> from trusted organizations to prove to browsers like Firefox that they are who they say they are. However, mistakes happen: a certificate can be mis-issued to the wrong party, or compromised by a malicious actor. When this happens, the certificate must be <em>revoked<\/em> so that browsers know it is no longer trustworthy. Communicating this information to browsers is a surprisingly hard problem \u2014 all previous methods have had to make tradeoffs between privacy, security, and performance.<\/p>\n\n\n\n<p>Mozilla stands for a web where users shouldn\u2019t have to make these tradeoffs \u2014 <a href=\"https:\/\/www.mozilla.org\/en-US\/about\/webvision\/full\/#ubiquitousencryption\" target=\"_blank\" rel=\"noreferrer noopener\">encryption<\/a>, <a href=\"https:\/\/www.mozilla.org\/en-US\/about\/webvision\/full\/#privacy\" target=\"_blank\" rel=\"noreferrer noopener\">privacy<\/a> and <a href=\"https:\/\/www.mozilla.org\/en-US\/about\/webvision\/full\/#performance\" target=\"_blank\" rel=\"noreferrer noopener\">performance<\/a> are cornerstones of our vision for the web, and it\u2019s our mission to build technology that gives users all three without compromise.<\/p>\n\n\n\n<p>CRLite represents a multiyear effort to deliver this vision with a comprehensive system that operates entirely on-device. This eliminates the need for online revocation checks, which both slow down page loads and leak the sites you\u2019re visiting to third parties on the network. Other browsers have deployed similar approaches, but these systems have only been able to store a small fraction of all revoked certificates, necessitating imperfect guesswork as to which ones are most important. CRLite is efficient enough to store <em>all<\/em> certificate revocations locally, requiring only 300KB per day of continuous updates to stay current.<\/p>\n\n\n\n<p>CRLite uses a number of clever algorithms and techniques to achieve its performance, and we are grateful to all the individuals inside and outside Mozilla who contributed insight and code to make it all work. You can find more technical details in the accompanying <a href=\"https:\/\/hacks.mozilla.org\/2025\/08\/crlite-fast-private-and-comprehensive-certificate-revocation-checking-in-firefox\/\" target=\"_blank\" rel=\"noreferrer noopener\">Hacks post<\/a> by lead engineer John Schanck, as well as in our recently published <a href=\"https:\/\/research.mozilla.org\/files\/2025\/04\/clubcards_for_the_webpki.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">paper<\/a>.<\/p>\n\n\n\n<p>CRLite sets a new standard for revocation security that you\u2019ll only find in Firefox today. We\u2019re proud of that, but we actually hope it doesn\u2019t stay that way. Our mission is to make the internet safer for everyone, and that means we want to see this level of security deployed everywhere, not just in Firefox. We\u2019ve designed CRLite to be easy for other browsers and internet clients to adopt or adapt, and look forward to comprehensive revocation checking becoming the norm everywhere.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>We are pleased to announce that Firefox 142 will begin production usage of our brand new certificate revocation system known as CRLite. CRLite makes your browsing faster, more private, and more secure, and is a significant advancement to the state of the art for encryption on the internet. Every day, billions of people rely on [&hellip;]<\/p>\n","protected":false},"author":1850,"featured_media":53149,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,464325,463312,5],"tags":[464204,4708],"coauthors":[462265],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Fast, private and secure (pick three): Introducing CRLite in Firefox<\/title>\n<meta name=\"description\" content=\"We are pleased to announce that Firefox 142 will begin production usage of our brand new certificate revocation system known as CRLite. CRLite makes your browsing faster, more private, and more secure, and is a significant advancement to the state of the art for encryption on the internet.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/\",\"url\":\"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/\",\"name\":\"Fast, private and secure (pick three): Introducing CRLite in Firefox\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2020\/01\/firefox-browser-logo.png\",\"datePublished\":\"2025-08-19T16:04:45+00:00\",\"dateModified\":\"2025-08-19T16:22:36+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/39c72fc5fe3131938ca29bc4d0fc71e5\"},\"description\":\"We are pleased to announce that Firefox 142 will begin production usage of our brand new certificate revocation system known as CRLite. CRLite makes your browsing faster, more private, and more secure, and is a significant advancement to the state of the art for encryption on the internet.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2020\/01\/firefox-browser-logo.png\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2020\/01\/firefox-browser-logo.png\",\"width\":2400,\"height\":1260,\"caption\":\"An illustration shows the Firefox logo, a fox curled up in a circle.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fast, private and secure (pick three): Introducing CRLite in Firefox\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/en\/\",\"name\":\"The Mozilla Blog\",\"description\":\"News and Updates about Mozilla\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/39c72fc5fe3131938ca29bc4d0fc71e5\",\"name\":\"Bobby Holley\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/image\/3778421c0b7c4656b76e9453776e3e22\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ac57223c49d41049a4917e187b854377?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ac57223c49d41049a4917e187b854377?s=96&d=mm&r=g\",\"caption\":\"Bobby Holley\"},\"description\":\"CTO, Firefox\",\"url\":\"https:\/\/blog.mozilla.org\/en\/author\/bholleymozilla-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fast, private and secure (pick three): Introducing CRLite in Firefox","description":"We are pleased to announce that Firefox 142 will begin production usage of our brand new certificate revocation system known as CRLite. CRLite makes your browsing faster, more private, and more secure, and is a significant advancement to the state of the art for encryption on the internet.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/","url":"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/","name":"Fast, private and secure (pick three): Introducing CRLite in Firefox","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2020\/01\/firefox-browser-logo.png","datePublished":"2025-08-19T16:04:45+00:00","dateModified":"2025-08-19T16:22:36+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/39c72fc5fe3131938ca29bc4d0fc71e5"},"description":"We are pleased to announce that Firefox 142 will begin production usage of our brand new certificate revocation system known as CRLite. CRLite makes your browsing faster, more private, and more secure, and is a significant advancement to the state of the art for encryption on the internet.","breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#primaryimage","url":"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2020\/01\/firefox-browser-logo.png","contentUrl":"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2020\/01\/firefox-browser-logo.png","width":2400,"height":1260,"caption":"An illustration shows the Firefox logo, a fox curled up in a circle."},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/en\/firefox\/crlite\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/en\/"},{"@type":"ListItem","position":2,"name":"Fast, private and secure (pick three): Introducing CRLite in Firefox"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/en\/#website","url":"https:\/\/blog.mozilla.org\/en\/","name":"The Mozilla Blog","description":"News and Updates about Mozilla","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/39c72fc5fe3131938ca29bc4d0fc71e5","name":"Bobby Holley","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/image\/3778421c0b7c4656b76e9453776e3e22","url":"https:\/\/secure.gravatar.com\/avatar\/ac57223c49d41049a4917e187b854377?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ac57223c49d41049a4917e187b854377?s=96&d=mm&r=g","caption":"Bobby Holley"},"description":"CTO, Firefox","url":"https:\/\/blog.mozilla.org\/en\/author\/bholleymozilla-com\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/posts\/81467"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/users\/1850"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/comments?post=81467"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/posts\/81467\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/media\/53149"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/media?parent=81467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/categories?post=81467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/tags?post=81467"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/coauthors?post=81467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}