Bugtraq mailing list archives

Re: CRLs (was Re: Verisign certificates problem


From: Patrick Patterson <ppatterson () carillonis com>
Date: Mon, 26 Mar 2001 07:56:36 -0500

-----BEGIN PGP SIGNED MESSAGE-----

That I know of, Entrust.net, SITA, and EQUANT all have functioning CRLs (They
use CDP's for slightly more efficient handling of large CRLs)


On Friday 23 March 2001 16:52, j eric townsend wrote:
someone wrote:
The first question I have after seeing that is how many of the rest of the
500,000 certificates that Verisign says they have issued also do not have
this CRL Distribution Point field properly filled in.

For that matter, how many certificates out there are attached to any
sort of CRL mechanism in the first place?  Is there any signing
authority with a functioning CRL service up and running right now?

--
jet () tivo com
The little voices in my head tell me it would be a bad idea to speak for
TiVo.

- --

Patrick Patterson                       Tel: +1 514 485-0789
President, Chief Security Architect     Fax: +1 514 485-4737
Carillon Information Security Inc.      E-Mail: ppatterson () carillonis com

- ----------------- The New Sound of Network Security -----------------
                  <<  http://www.carillonis.com  >>


Current thread: