Ben Laurie wrote: > Since a suspended certificate is as unusable as a revoked one, it makes > no sense to me to permit _any_ differences between the creation of a > suspension and the creation of a revocation. Which means that there's > little point in supporting suspension at all. > > Cheers, > > Ben. But the point is: the certificate is not yet revokable but its state it's been reported to be 'probably compromised'. It would be useful to get the server(s) not allowing critical data transmission using such keys... (refer to a model where the ca machine is disconnected for security porpouses). C'you, Massimiliano Pala (madwolf@openca.org)
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature