Re: Online Certificate Revocation Protocol

[Hansen Wang <hansen.wang@xxxxxxxx>]

Tony Bartoletti wrote:

> If CAs may "take a long time" to effect the out-of-band revocation, I have
> to assume the issue is really some combination of "staffing" and "low
> priority", rather than a concern about DoS.

But out-of-band could also mean going to the CA's web page and filling
out a form such as typing in the some passwords/passphrase, presenting
some electronic credentials or mother's maiden name (bad example) to
request for the revocation. This would not involve staffing and would be
nearly as quick as sending the revocation message through "in-band"
means.

Hansen