Comment by tbodt

They should be downloading a bloom filter of revoked certificates, instead of checking with a server every time.

This is known as CRLite, and Firefox is implementing it for HTTPS certificates. https://blog.mozilla.org/security/2020/01/09/crlite-part-1-a...