3 ms·
> That is, how are the intermediate certificates supposed to be revoked if certificate revocation does not work relibably ? It's a much smaller amount of infor
by pstrateman 13y ago
> That is, how are the intermediate certificates supposed to be revoked if certificate revocation does not work relibably ?
It's a much smaller amount of information, so a normal CRL can be used effectively.
You really cannot use a CRL to revoke millions of certs, but you can use them to revoke a few hundred.