[ca-tf] Proposal 2008-08 v2

>>> Anyone who doesn't use OSCP to check the revocation status knows that
>>> he/she might be trusting a certificate that they shouldn't trust...
>> so you want to pay 25 cents every time you receive a route announcement?
> No, but you should understand what you are placing your trust in. And
> think about how often you want to revalidate that trust...

the rpki has crls and our relying party software fetches and checks
them.

randy