4 Jun
2005
4 Jun
'05
12:13 a.m.
I'm not sure the gain outweighs the additional complexity. How many percent of the issued certificates are typically revoked? That's the maximum reduction of OCSP queries that you would get as a result.
The hits on the local CRL are a function of USE of a revoked certificate, not he EXISTANCE of a revoked certificate. I would expect the use to be ver much lower than the existence number. Bob Cowles