[cabfpub] FW: Short lived OCSP signing certificate

[Yngve N. Pettersen]

On Tue, 18 Sep 2012 18:05:14 +0200, Rich Smith <richard.smith at comodo.com>
wrote:

> The disconnect here
> seems to be that the relying parties take that 10 day lifespan to mean  
> that
> they can leave off checking to 10 day intervals and that is faulty
> reasoning.

Opera currently have a max cache time of 4 days (since loading) for
revocation information, even if the revocation file says it has a lifespan
longer than that.

-- 
Sincerely,
Yngve N. Pettersen

********************************************************************
Senior Developer                     Email: yngve at opera.com
Opera Software ASA                   http://www.opera.com/
Phone:  +47 23 69 32 60              Fax:    +47 23 69 24 01
********************************************************************