[ca-tf] Proposal 2008-08 v2
Sander Steffann sander at steffann.nl
Fri Sep 24 09:37:57 CEST 2010
> another very short comment - any process which relies upon revocation as a procedure for routine system operation will not fly (i have told it many times already). > Or one should _mandate_ the usage of OCSP, which will not fly either. Anyone who doesn't use OSCP to check the revocation status knows that he/she might be trusting a certificate that they shouldn't trust... Sander
[ Ca-tf Archive ]
