Request for Opinion - LDAP Proxy in a PKI environment

["Ed Greshko" <edward.m.greshko@xxxxxxxxxxxx>]

Hello,

A question has begun to crop up in various places about the suitability of
using an LDAP proxy with caching in a PKI environment.  The particular
environment in question uses CRLs stored in a single LDAP object.

My initial reaction to this is that it would be undesirable to deploy a
proxy with caching.

I'm interested in what views others would have.....

Thanks,
Ed