Certificate Revocation

As Chapter 8 discussed, it is possible to implement a number of possible certificate revocation mechanisms. Variables associated with the dissemination of revocation information include protocols, timeliness, size, performance, scalability, and so on.

It is up to each organization to determine its revocation requirements, and it is up to the technology vendor to meet those requirements. As Chapter 8 discussed, it is likely that PKI technology vendors will offer multiple solutions to maximize the chances that they will be capable of meeting the variety of needs in an extremely diverse market. In any case, ensuring that the technology vendor meets the organization's requirements (both now and in the future) is essential. ...

Get Understanding Public-Key Infrastructure: Concepts, Standards, and Deployment Considerations now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.