[caops-wg] OCSP section 4
Cowles, Robert D.
rdc at slac.stanford.edu
Fri Jun 3 19:13:56 CDT 2005
> I'm not sure the gain outweighs the additional complexity. How many
> percent of the issued certificates are typically revoked? That's the
> maximum reduction of OCSP queries that you would get as a
> result.
The hits on the local CRL are a function of USE of a revoked
certificate, not he EXISTANCE of a revoked certificate. I would
expect the use to be ver much lower than the existence number.
Bob Cowles
More information about the caops-wg
mailing list