Hi,
given the recent Comodo problem I was looking how OpenSSL handles
certificate revocation and found good information here:
using OCSP
http://etutorials.org/Programming/secure+programming/Chapter+10.+Public+K...
using CRL
http://etutorials.org/Programming/secure+programming/Chapter+10.+Public+K...
Now thats a lot of code that must be implemented in the client - I am
wondering how many clients do in fact implement it?
Richard
---
Name and OpenPGP keys available from pgp key servers