Re: On-line revocation checking

["Housley, Russ" <housley@xxxxxxxxxx>]

The private extension tells a certificate user how to contact the on-line 
service for revocation checking.  After the last IETF meeting, this appears 
to be the only function that requires the private extension.  The other 
features are provided by the URI form of GeneralName.

No one has suggested a protocol for on-line revocation checks.  Perhaps the 
USPS would like to share the one they plan to use?

Russ


______________________________ Reply Separator _________________________________
Subject: On-line revocation checking
Author:  ffdez@ait.uvigo.es (Francisco Fernandez Massaguer) at internet
Date:    1/3/97 8:25 AM


 In the  Part I draft of PKIX (draft-ietf-pkix-ipki-part1-03.txt) document, 
(end of 3.3 section) it is considered the possibility of (future ?) on-line 
recovation checking approaches.

I have revised
        draft-ietf-pkix-ipki-part1-03.txt (Part I), 
        draft-ietf-pkix-polfmwk-00.txt (Policy), and  
        draft-ietf-pkix-ipki3cmd-02.txt (Part III)

and apart from the mentioned 3.3 section in Part I and a little note in 
section 6.6.1 in the Policy document, I haven't found anything more about 
this theme. 

Is or will be this point considered in greater detail on some other of the 
various draft parts or versions of PKIX ?.

Thanks.
Francisco Fernandez.
------------------------------------------------------------------------ 
Francisco Fernandez Massaguer            E-mail: ffernandez@ait.uvigo.es 
ETSI Telecomunicacion Vigo                  Tel: +34-86-812181
Vigo, SPAIN                                 Fax: +34-86-812116 
------------------------------------------------------------------------