-
@Aissn The challenge is distributing the revocation list in the triangle of private/efficient/timely....
-
@Aissn Offline verification is one of the important design criteria (for privacy of cert holders and availability), so one has to pick a regular schedule and granularity of CRL caching in clients. I'm honestly not sure how consistent that is at the moment.