Re: More on OCSP and CSL

[Stephen Kent <kent@xxxxxxx>]

Massimiliano,

I think we've established that, syntactically, we can represent the 
CSL concept using a CRL, with appropriate reason codes.  Thus there 
is no motivation to create another syntactic construct.  A CA can 
choose to issues a CDP just for suspended certs if appropriate.

One might choose to propose a new work item, a protocol for 
suspension and reinstantiation of certificates, based on the 
motivations that you are describing here.  Personally, I don't find 
them compelling in most instances. For example, the user who leaves 
his smart card at work before going on vacation.  However, some in 
the financial community have suggested such scenarios to justify the 
existence of suspension in the first place, so I know that you are 
not alone in thinking this way!


Steve