Re: CRL Service

> Well we "can" handle multiple roots (say one for each PCA). However if
> we go this way, we will have to install new software each time we add
> a PCA. We can do this to get the ball rolling, it just isn't a good
> long term strategy.

I think there's alot to be said for PGP's "web of trust".  Not only is
it compatible with a hierarchical system, but it can handle multiple
hierarchies easily.  And would appear to be much more flexable.


brad