Russ, the problem with this is that CAs might be unwilling to issue
delta-CRLs because issuing a full CRL every time is too
burdensome.
Could you describe how it is "too burdensome"? Maybe I'm being naive,
not being a CA, but asking a CA to sign a second document (the full
CRL) at the time that it signs the first document (the delta-CRL)
really doesn't seem that onerous.
I think the current requirement is fine.
--Paul Hoffman, Director
--Internet Mail Consortium