[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Signer certificate discovery for CRLs




Stefan,


Denis,

<snip>

Use of AIA in CRLs would be one way to do it, while the use of SIA
in CA certificates is the other way.

I'm pleased to read that you acknowledge AIA in CRLs as a valid option.
That is all I ask for.

I'm pleased to read that you noticed that AIA *would be an option* since I used "would be" in the case of AIA and "is" in the case of SIA:


Use of AIA in CRLs *would be* one way to do it, while the use of SIA
in CA certificates *is* the other way.  :-)

Denis

Stefan Santesson
Microsoft Security Center of Excellence (SCOE)