Re: Non-repudiation

Ray,

        This question has come up before.  In general there is not a
requirement for PCAs or CAs to archive CRLs forever.  Rather, the
moddel adopted in PEM places the burden on a user to retain the
necessary CRLs if non-repudiation is a concern.  However, a PCA might
establish CRL archive requirements if it believed that its subscribers
would view this as a value-added feature.

Steve