[caops-wg] OCSP section 4

Cowles, Robert D. rdc at slac.stanford.edu
Fri Jun 3 19:13:56 CDT 2005


 


> I'm not sure the gain outweighs the additional complexity. How many 
> percent of the issued certificates are typically revoked? That's the 
> maximum reduction of OCSP queries that you would get as a 
> result. 

The hits on the local CRL are a function of USE of a revoked
certificate, not he EXISTANCE of a revoked certificate. I would
expect the use to be ver much lower than the existence number.

Bob Cowles





More information about the caops-wg mailing list