课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

免费学习该课程！

今天就开通帐号，24,600 门业界名师课程任您挑！

Revoke a digital certificate

Revoke a digital certificate

课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

开始一个月试用 购买团队方案

Revoke a digital certificate

“

- [Narrator] The security of digital certificates depends upon the security of the private keys associated with those certificates. If the certificate owner's private key is compromised, the owner needs a way to revoke the digital certificate so that it can't be used to impersonate them. There are two methods for revoking a digital certificate. Both are maintained by the certificate authority who issued the certificate. The original approach is the Certificate Revocation List, or CRL. When the CA wishes to revoke a digital certificate using the CRL, it places the serial number of that certificate on its CRL. Anyone accessing a digital certificate is responsible for downloading the certificate revocation list and verifying that the serial number of the certificate they're verifying is not included on that list before relying upon the certificate. Now, this approach is inefficient because it often has time delays and consumes a lot of network bandwidth. As everyone on the internet…

内容