dave ("Mike") davesons wrote, On 2009-03-11 08:52:

> In our organization we use nss to validate CRLs of the Belgian Government. 
> In a few months it is expected that these CRLs will grow exponentially. 
> It will be necessary to download many gigabytes of CRLs each day. 

So, you see this problem coming in advance.  That's good.  Maybe someone
should be looking into how this revocation problem can be solved without
gigabytes of CRLs, like OCSP for example.

> Therefore, delta CRL seem to become necessary.
> Is there already any progress on the delta CRLs?
> 
> kind regards,
> Mike

No, there are no plans for delta CRLs.
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to