[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: delta-CRLs (was Re: Last Call:draft-ietf-pkix-new-part1-06.txt comments)



Yes,
If a CA has not updated its CRL, the OCSP client may be aware of a
revocation that the CRL client is not - which h is the reason put
forward by Russ for publishing base and delta at the same time.
Trevor

-----Original Message-----
From: Michael Myers [mailto:myers@xxxxxxxxxxxxx] 
Sent: Sunday, April 22, 2001 6:18 PM
To: Trevor Freeman; Housley, Russ; ietf-pkix@xxxxxxx
Subject: RE: delta-CRLs (was Re: Last
Call:draft-ietf-pkix-new-part1-06.txt comments)

Trevor,

Is your differentiator timeliness?

Mike


> -----Original Message-----
> From: Trevor Freeman [mailto:trevorf@xxxxxxxxxxxxxxxxxxxxx]
> Sent: Sunday, April 22, 2001 5:28 PM
>
> . . .
> An OCSP aware client may have a different answer to CRL
> aware clients to the revocation status of a certificate.
> . . .