| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
4.5.6.1 Status Checking Just as its generally unwise to trust the data in a revoked certificate, because it may or may not be valid, its unwise to trust the data in a suspended certificate. This is another reason that a potential user should verify a certificates validity by status checking. As mentioned previously, this entails checking against the CRL or OCSP (or any other mechanism used by the CA to validate its digital certificates). If it is temporarily impossible to check the validity, the user must make an informed choice about whether to accept the risk of using a certificate whose authenticity cannot be verified.
Home - Table Of Contents - Contact Us CertiGuide for Security+ (http://www.CertiGuide.com/secplus/) on CertiGuide.com Version 1.0 - Version Date: November 15, 2004 Adapted with permission from a work created by Tcat Houser et al. CertiGuide.com Version © Copyright 2004 Charles M. Kozierok. All Rights Reserved. Not responsible for any loss resulting from the use of this site. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||