[cabfpub] BR clarification re: test certificates

Gervase Markham gerv at mozilla.org
Mon Apr 17 08:08:33 MST 2017


On 17/04/17 15:59, Ryan Sleevi wrote:
> It may be useful to state why you believe it's difficult.

As you have guessed - my surmise was that, particularly with caching,
CDNs, etc., it can be difficult to make sure that CRLs and OCSP
responders are delivering exactly the same information at all times with
no skew whatsoever.

It may be that in practice, the skew is always or almost always seconds
or minutes, in which case I doubt we need to cater for it in the wording.

Gerv


More information about the Public mailing list