Hi again,
Does anyone know of any benchmarks regarding the size of CRLs towards
performance? Or how much CRLs are supported at most?
2009/3/12 dave davesons <dave.daves...@gmail.com>
> Hi,
>
> thanks for the clarification. BTW: OCSP is available in belgium. But we
> like to have a fallback....
>
> 2009/3/12 Nelson B Bolyard <nel...@bolyard.me>
>
> dave ("Mike") davesons wrote, On 2009-03-11 08:52:
>>
>> > In our organization we use nss to validate CRLs of the Belgian
>> Government.
>> > In a few months it is expected that these CRLs will grow exponentially.
>> > It will be necessary to download many gigabytes of CRLs each day.
>>
>> So, you see this problem coming in advance. That's good. Maybe someone
>> should be looking into how this revocation problem can be solved without
>> gigabytes of CRLs, like OCSP for example.
>>
>> > Therefore, delta CRL seem to become necessary.
>> > Is there already any progress on the delta CRLs?
>> >
>> > kind regards,
>> > Mike
>>
>> No, there are no plans for delta CRLs.
>> --
>> dev-tech-crypto mailing list
>> dev-tech-crypto@lists.mozilla.org
>> https://lists.mozilla.org/listinfo/dev-tech-crypto
>>
>
>
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
