Re: Usage of CRL Issuing Distribution Point

[Stephen Kent <kent@xxxxxxx>]

Pau-Chen

> I still have one question :
>
>   Section 5.2.5 of RFC 2459 says that an issuing-distribution-point
>   extension in a CRL can have DistributionPointName and ReasonFlags,
>   etc.
>
>   I can see why we need ReasonFlags. But what is the purpose for
>   DistributionPointName ? I have to know this name before I can get
>   the CRL, right ?

Inclusion of this info ensures that the CRL you retrieved is the one you
asked for, since we would rather not have to trust the directory system to
that extent.

Steve