Hansen Wang wrote:
[..]
>
> Isn't that what OCSP supposed to do? RFC 2560
>
> 2560 X.509 Internet Public Key Infrastructure Online Certificate
[...]
> Also Certificate Revocation Status is also a per request - per response
> system.
What I was talking about is a method to allow for standard revocation request
method to be adopted by a subject when asking the authority for revocation of
a specified certificate, not simply a method to ask for the state of a
certificate.
Let's informally call it "OCRP - Online Certificate Revocation Protocol".
--
C'you,
Massimiliano Pala
--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager] madwolf@xxxxxxxxxx
madwolf@xxxxxxxxxxxxxxx
http://www.openca.org Tel.: +39 (0)59 270 094
http://openca.sourceforge.net Mobile: +39 (0)347 7222 365Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature