I'd have to say though that the CDP field works rather well. I run a rather
large set of CAs. When we were just using the monolithic CRL, each client
takes a long time to do verification of certificates. When we switched to
the distribution point extension, verification checking time fell
considerably.
Ron Ogle
Thomson multimedia
Rennes, FR
-----Original Message-----
From: Peter Gutmann [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 26, 2001 8:20 AM
To: [EMAIL PROTECTED]
Subject: Re: Verisign certificates problem
Elias Levy <[EMAIL PROTECTED]> writes:
>Actually checking most of the CA certificates shipped with IE less than
half
>have a CPD field. Of the big CA only Entrust seems to use the field.
That's not surprising, they invented and, I believe, patented the thing.
Peter.
