Subject: [pkix] I-D draft-hamilton-crlwhitelist-00

From: Kyle Hamilton <[email-masked]>
Date: Sat, 3 Dec 2011 10:55:48 -0800

All,

I've uploaded a new draft, documenting a supplemental production to
current CRLs.  It is a simple format to include certificate
authentication data as a crlEntryExtension, and a whitelist with the
same authenticated data format in a crlExtension.

There is no protocol from PKIX which can directly use or consume
certificate strong authentication data.  Nevertheless, until it's
provided in some manner, no protocol ever will be able to.

(If you don't like using the CRL for this data, please, will you write
something up to do it and propose it?  We need this capability, and we
need it soon.)

-Kyle H