[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Cached OCSP responses vs. single entry CRLs



Why use OCSP to convey pre-produced revocation information in the way that's
being discussed?  Why not use single entry CRLs?  The functionality is
similar and they could be propagated using existing technology (e.g.
directories, 3280 compliant path processing clients, etc.).