RE: CRL Push over S/Mime

[Trevor Freeman <trevorf@xxxxxxxxxxxxx>]

I have been asked to write up a mail based distribution for pkix part
two. 
I do not understand the reasoning behind using s/mine for
certificate/crl distribution. The data being distributed is signed. so
its integrity not in question. Its published data so why do we need
confidentiality. 

If someone has some insight it would be welcome before I finish the
work.

Dr Trevor Freeman
Senior Consultant
Microsoft Consulting Services
Microsoft Ltd ECU
> Tel:  UK(+44) 1734 270412 
Fax: UK(+44) 1734 270435


> -----Original Message-----
> From:	Dwight Arthur [SMTP:dwightarthur@mindspring.com]
> Sent:	Thursday, July 03, 1997 5:53 PM
> To:	PKIX List
> Subject:	CRL Push over S/Mime
> 
> Part Two describes CRL distribution via LDAP and FTP, and also OCSP,
> presumably over HTTP. There is no description of S/Mime as a protocol
> for the distribution of CRL's.
> 
> If I understood some prior information published to this list by
> Netscape, Communicator 4 is most effectively able to respond to CRL's
> received via S/Mime, and can even handle the expiration time specified
> for a CRL.
> 
> Is an enhancement to Part Two to describe CRL distribution over S/Mime
> in the offing?
> 
> -Dwight << File: Card for Dwight Arthur >>