Hi! Excuse for my English, but I have need for answer of the following
question.

The situation is following:
1) There is some server which has the certificate with CRLDistributionPoint
extension. The URL for downloading CRL is defined, but appropriate file is
not exist physically, i.e. direct request for defined URL gives HTTP 404
error.
2) When a user of IE7 requests the page of this server after some delay it
receives requested page without any warnings. In this case previous version
of Internet Explorer, IE6, outputs a warning dialog that CRL is inaccessible
and gives the opportunity to user to continue or to break operation.
3) For information:
- during the delay of loading requested page, IE7 attempts to download
the CRL, that is reflected in proxy log.
- option "Check for server certificate revocation" is enabled for IE7
settings;
- client certificate “Root” store includes CA certificate that is
issuer of the server certificate.
- server certificate does not include data for OCSP protocol.
- this behavior is appearing in Russian and English versions of IE7.

So my question: is it really IE7 ignores CRL downloading error without
possibility to inform the user about the problem and, if it is so, what about
security?

Thank you in advance.

Aleksandr,
Ukraine