On 17/04/17 15:59, Ryan Sleevi wrote: > It may be useful to state why you believe it's difficult.
As you have guessed - my surmise was that, particularly with caching, CDNs, etc., it can be difficult to make sure that CRLs and OCSP responders are delivering exactly the same information at all times with no skew whatsoever. It may be that in practice, the skew is always or almost always seconds or minutes, in which case I doubt we need to cater for it in the wording. Gerv _______________________________________________ Public mailing list [email protected] https://cabforum.org/mailman/listinfo/public
