CRLSet component to check revoke status of certificates

Description

CRLSet component to check revoke status of certificates

Who's implementing?

• I'm willing to implement this feature myself

The problem

CRLSet is excluded from Ungoogled Chromium, since it contacts Google Servers.

Still this feature is important for security to check the status of website and CA certificates. With the component removed MITM attacks are possible and could happen at all, since the browser never is informed of a certificate revocation.

Possible solutions

Multiple solutions would be possible:

• Add the component per default and add a configutation toggle to browser settings to enable/disable (default setting: disable)
• Don't add it at all and inform the user how it can be installed by the user (Question: Would it be enough to move the CRLSet component of a Chrome installation to the UserData folder, similar to installing Widevine?)

Alternatives

No response

Additional context

No response