Periodic Publication Mechanisms

The purpose of this section is to describe the various periodic publication mechanisms available. The periodic publication mechanisms discussed within this section are

  • Complete Certificate Revocation Lists (CRLs)

  • Authority Revocation Lists (ARLs)

  • CRL Distribution Points (also known as Partitioned CRLs)

  • Delta CRLs

  • Indirect CRLs

  • Enhanced CRL Distribution Points and Redirect CRLs

  • Certificate Revocation Trees (CRTs)

Generally, these periodic publication mechanisms can be considered "pre-publication" techniques characterized by issuing the revocation information on a periodic basis in the form of a signed data structure. All but one of these techniques (CRTs are the exception) are based on the same basic data structure ...

Get Understanding Public-Key Infrastructure: Concepts, Standards, and Deployment Considerations now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.