Performance, Scalability, and Timeliness

Intuitively, one can make certain assumptions (or at least ask intelligent questions) regarding the performance, scalability, and timeliness characteristics of the various revocation information dissemination techniques described in this chapter. The key is to understand the principles behind these various techniques, and to ask enough questions that will lead to solid engineering choices for a given PKI domain, or set of interoperable PKI domains.

Unfortunately, there is little operational information available with respect to performance in large-scale PKIs. There are, however, several papers available that explore performance issues associated with some of the techniques described in this chapter. ...

Get Understanding Public-Key Infrastructure: Concepts, Standards, and Deployment Considerations now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.