Re: [Fed-Talk] Memory usage spikes when viewing Signed Emails
Re: [Fed-Talk] Memory usage spikes when viewing Signed Emails
- Subject: Re: [Fed-Talk] Memory usage spikes when viewing Signed Emails
- From: "Shawn A. Geddis" <email@hidden>
- Date: Wed, 29 Aug 2007 20:08:03 -0400
On Aug 29, 2007, at 7:22 PM, Beck, Keith M LCDR CNO-OPNAV wrote:
On 2007-08-28T20:13:24-07:00, Timothy J. Miller wrote:
We've been using OCSP pointers in AIA for a while now. In a couple
more years, all non-OCSP certs will have expired and be out of
circulation for good.
An informal survey in my office shows everyone with CA-11 or older
with
only CRL URIs and everyone with CA-12 or newer having an ocsp field in
their AIA entry. I would guess 2010 or so before all of the certs
with
only CRL URIs are gone.
Keith
Keith,
As long as the Certs contain the URI for OCSP (AIA Extension) you can
configure OS X to ONLY use that and avoid any use of CRL... Or of
course the combination of both which would be valuable to folks
transitioning from CRL to OCSP...
Keep in mind thought that the Certificate Processing (CRL/OCSP) is for
all certificates you send or receive, so that many if not all will
face having both CRL and OCSP for quite sometime in the future. The
2010 date noted is for some, but probably not for all Certs you will
see for quite some time...
- Shawn
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden