Re: Online Certificate Revocation Protocol

[Paul Hoffman / IMC <[e-mail]>]

At 5:57 PM -0700 6/8/01, Hansen Wang wrote:
>But out-of-band could also mean going to the CA's web page and filling
>out a form such as typing in the some passwords/passphrase, presenting
>some electronic credentials or mother's maiden name (bad example) to
>request for the revocation. This would not involve staffing and would be
>nearly as quick as sending the revocation message through "in-band"
>means.

Exactly. But it is up to each CA, and we can't determine what they 
should do here.

--Paul Hoffman, Director
--Internet Mail Consortium