Verisign CRL single point of failure

[Rich Salz]

>   I'm not sure what the "no longer
>   dynamically changing" means, I assume they've made it even worse by giving
>   it a much larger expiry period, so your online check gives you the status
>   from last year instead of last week.

It means that they learned the lesson when the erroneously issued
two MSFT certificates:
        In the future, VRSN patches will be issued as MSFT
        software updates.

--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com