分割CRL

セキュリティ用語

分割CRL または Partitioned CRL †

4th Annual PKI R&D Workshopで、Booz Allen HamiltonのRebecca Nielsenが Observations from the Deployment of a Large Scale PKIの中で、

- CA divides certificates into blocks of a preset size based on certificate serial number

- CA issues one CRL for each block

- Applications that do not use CRL Distribution Points do not support the use of partitioned CRLs well

と表現しています。

Tag: Partitioned CRL CRL