Istio 1.0 is non-compliant with CT1614 because it does not support certificate revocation (e.g. CRL). Issue 3886 has been created to track this feature request.
| Task | # of Hours |
|---|---|
| Learn Existing Codebase | 40 |
| Understand PKI, CRL, etc. Details | 36 |
| Explore Existing PKI/CRL Solutions | 24 |
| Socialize CRL Ideas with Community | 8 |
| Create Design Spec | 48 |
| Socialize Design Spec with Community | 8 |
| Code Initial Implementation | 440 |
| Get PRs Merged | 32 |
| Documentation | 24 |
| TOTAL | 660 |