4 ms·
This is paying for revoke checking, right? Validating the certificate the same way servers validate client certificates should be enough to verify it as a date
by j_s 9y ago
This is paying for revoke checking, right?
Validating the certificate the same way servers validate client certificates should be enough to verify it as a date/time-valid Estonian ID.
- AndresAlla 9y agoYes, this is to use OCSP. You do not have to pay if you download revocation lists manually. Ofcourse lists become stale rather quickly. Very basic - hello world level - implementation is as simple as enabling client certificate authentication in Apache config.