Abstract
Public key cryptography is widely used toprovide Internet se curity servic es. The PKI is the infrastructure that supports the public key cryptography and the revocation of certificates implies one of its major costs. In this paper we propose a model to compare revocation policies and we use it to compare the main revocation policies: OCSP and Overissued-CRL.