Nelson B Bolyard wrote:
TLS servers that request client authentication prefer to use CRLs than OCSP for validating client certs because it's faster and more efficient to use a CRL downloaded (say) daily than to do an OCSP query for every connection.
That's all well and good until your CRLs get to a couple of hundred megabytes.
-- Tim
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature