RE: going around the crypto

[Peter Gutmann]

Alan Ramsbottom <[EMAIL PROTECTED]> writes:

>IE5 gives you one or more warnings (unknown CA, invalid cert date, URL-CN
>mismatch) and asks if you want to proceed.
>
>It can also check CRLs, but the feature is disabled by default (doubtless on
>standards/compatibility grounds).

Performance grounds.  Most people don't want their app grinding to a halt for
several minutes while it gropes around for CRL's every time it runs into a 
cert.

Peter.