Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

What is/are the CRL distribution points that must be used by OpenNCP? Options:

  1. All CRLs published by all CAs on European TSL lists (question related to this option: performance issues/too many CRL addresses, where to get the list?).
  2. The CRL address given in the certificate (question related to this option: why OpenNCP should trust this address, if the intention is to validate this very certificate?).
  3. Some predefined CRL addresses (question related to this option: how to define a trustworthy way of sharing this list?)
  4. Other option.

How are CRL checks implemented in FET solution?

...