Peter Williams wrote:

what is fascinating about the design of the library is not its novelty, but its audacity. You cannot use the crypto capability of the CAC if (a) the network is not there (b) the crypto control authority (via signed OCSP) doest cooperate or opts not to cooperate with you for reason R, in real time.

Not true. Revocation checking can be disabled, or local copies of the CRLs can be used instead.

-- Tim

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to