[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [caops-wg] OCSP section 4

To: "Olle Mulmo" <mulmo@xxxxxxxxxx>, <helm@xxxxxxxxxxxx>
Subject: RE: [caops-wg] OCSP section 4
From: "Cowles, Robert D." <rdc@xxxxxxxxxxxxxxxxx>
Date: Fri, 3 Jun 2005 17:13:56 -0700
Cc: <caops-wg@xxxxxxx>, "Oscar Manso" <o.manso@xxxxxxxxxxxx>
Delivered-to: grdfm-caops-wg-outgoing@mailbouncer.mcs.anl.gov
Delivered-to: grdfm-caops-wg@mailbouncer.mcs.anl.gov
Sender: owner-caops-wg@xxxxxxx
Thread-index: AcVoIiJsPKhBtybdTf2DzGhKbZ916AAd+oEg
Thread-topic: [caops-wg] OCSP section 4

 


> I'm not sure the gain outweighs the additional complexity. How many 
> percent of the issued certificates are typically revoked? That's the 
> maximum reduction of OCSP queries that you would get as a 
> result. 

The hits on the local CRL are a function of USE of a revoked
certificate, not he EXISTANCE of a revoked certificate. I would
expect the use to be ver much lower than the existence number.

Bob Cowles

Prev by Date: Re: [caops-wg] OCSP section 4
Next by Date: Re: [caops-wg] OCSP - proxy certs
Previous by thread: RE: [caops-wg] OCSP section 4
Next by thread: RE: [caops-wg] OCSP section 4
Index(es):
- Date
- Thread