pem-dev
[Top] [All Lists]

Re: revocation

1992-02-12 12:35:00
Dave,

        I think the desired effect is really quite easy, without
reissuing a certificate.  If we asume the intent is to revoke
certificates which the issuer plans to terminate at a know, future
date, then the issuer can schedule the next update for his CRL to
coinside with that date.  Of course, this works best if there is a
single scheduled date that applies to most/all of the certificates
that would otherwise would have been "pre-hot listed."

        Your alternative approach provides more precise control, but
if there is a cost to reissuance of certificates (beyond the obvious
management costs), it may be less desirable.

Steve

<Prev in Thread] Current Thread [Next in Thread>
  • re: revocation, David=Jablon%Eng%Banyan
    • Re: revocation, Steve Kent <=