Final answer:
The major disadvantage of Certificate Revocation Lists is latency, due to large list sizes and the need for frequent updates which can slow down verification processes.
Step-by-step explanation:
The major disadvantage of using Certificate Revocation Lists (CRLs) is B. Latency. Certificate Revocation Lists can become quite large and unwieldy as the number of revoked certificates grow. This results in latency issues because the client must download the entire list to check if a certificate is revoked, necessitating significant time especially in environments with frequent updates or limited bandwidth. Additionally, the CRL needs to be frequently updated to ensure it reflects the latest revocation statuses, which can further exacerbate latency problems.
A more modern solution to overcome the disadvantages of CRLs is the use of the Online Certificate Status Protocol (OCSP), which allows clients to query the status of a single certificate without needing to download an entire list, thereby significantly reducing latency and improving performance.