Evaluation of certificate revocation policies: OCSP vs. Overissued-CRL

Abstract

Public key cryptography is widely used to provide Internet security services. PKI is the infrastructure that supports public key cryptography and revocation of certificates implies one of its major costs. In this paper we propose a model to compare revocation policies and use it to compare the main revocation policies: OCSP and Overissued-CRL.