From 4f59c424dabfc69b7313d84685df68dd406d6ff9 Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Fri, 12 Sep 2014 21:13:47 +0100 Subject: Fix needless OCSP request under DANE usage 3 and with require_ocsp in play though inactive --- doc/doc-docbook/spec.xfpt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'doc') diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index 28597c352..e5f307882 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -26309,7 +26309,7 @@ an identically named option for the &(smtp)& transport. In each case, the value of the option is expanded and must then be the name of a file that contains a CRL in PEM format. The downside is that clients have to periodically re-download a potentially huge -file from every certificate authority the know of. +file from every certificate authority they know of. The way with most moving parts at query time is Online Certificate Status Protocol (OCSP), where the client verifies the certificate -- cgit v1.2.3