pem-dev
[Top] [All Lists]

Re: Non-repudiation

1993-05-27 07:19:00
Paul,

        Unfortunately, the CRLs available to the sender at the time of
transmission generally are not the ones needed by a recipient in
support of non-repudiation.  What a receiver needs are the next set of
CRLs issued, ones issued after the message was sent, to prove that the
relevent certificates were not revoked at the time the message was
sent.  The CRLs available to the originator would make a statement
about the revocation status of certificates prior to the sending of
the message.  One could argue that for less stringent validation
situations (other than non-repudiation), the "older" CRLs would be
adequate, and that suggests that an option to send them in the header
as part of a regular message might be helpful.

Steve

<Prev in Thread] Current Thread [Next in Thread>