Re: [PATCH v5 1/4] certs: Add EFI_CERT_X509_GUID support for dbx entries

From: David Howells
Date: Thu Jan 28 2021 - 10:59:47 EST


Nayna <nayna@xxxxxxxxxxxxxxxxxx> wrote:

> Thanks Eric for clarifying. I was confusing it with with the broader meaning
> of revocation i.e. certificate revocation list. To avoid similar confusion in
> the future, I wonder if we should call it as 'blocklist' or 'denylist' as
> suggested in the document. This is to avoid conflicts with actual CRL support
> if added in the future. I also wonder if we should add the clarification in
> the patch description.

Reject-list might be better.

David