Forum Discussion
smilanko_261688
Cirrus
CirrusCRL vs Checking if account is disabled
When it comes to CAC authentication, is there a particular benefit in checking if certificates from the CAC were revoked using a CRL as opposed to parsing out the CN value(identifier in AD) to see if...
boneyard
MVP
MVPi agree with you, CRLs are more meant when there isn't another source to check. i mean an AD is not always involved and then CRLs are nice. but certainly the delay can be an issue.
