<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.technet.com/utility/FeedStylesheets/atom.xsl" media="screen"?><feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-US"><title type="html">An Infrastructure Geek Floating in a Sea of UberCoders</title><subtitle type="html" /><id>http://blogs.technet.com/lrobins/atom.xml</id><link rel="alternate" type="text/html" href="http://blogs.technet.com/lrobins/default.aspx" /><link rel="self" type="application/atom+xml" href="http://blogs.technet.com/lrobins/atom.xml" /><generator uri="http://communityserver.org" version="2.1.61025.2">Community Server</generator><updated>2008-10-15T17:27:00Z</updated><entry><title>Publishing Delta CRLs on IIS 7</title><link rel="alternate" type="text/html" href="http://blogs.technet.com/lrobins/archive/2008/12/29/publishing-delta-crls-on-iis-7.aspx" /><id>http://blogs.technet.com/lrobins/archive/2008/12/29/publishing-delta-crls-on-iis-7.aspx</id><published>2008-12-29T17:07:00Z</published><updated>2008-12-29T17:07:00Z</updated><content type="html">If you have migrated or upgraded the sites on which you host your CA CRLs and delta CRLs to IIS 7, you may have noticed a (rather frustrating when you're experiencing it) new behavior. IIS 7 will, by default, reject requests containing double escape characters (for example, files containing a "+" sign in the name, such as delta CRLs). While this is a valid, standards-based security feature, the end result is that your clients cannot retrieve delta CRLs from an IIS 7-hosted site unless you change...(&lt;a href="http://blogs.technet.com/lrobins/archive/2008/12/29/publishing-delta-crls-on-iis-7.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3174370" width="1" height="1"&gt;</content><author><name>lrobins@microsoft.com</name><uri>http://blogs.technet.com/members/lrobins%40microsoft.com.aspx</uri></author><category term="certification authority" scheme="http://blogs.technet.com/lrobins/archive/tags/certification+authority/default.aspx" /><category term="certificate authority" scheme="http://blogs.technet.com/lrobins/archive/tags/certificate+authority/default.aspx" /><category term="CA" scheme="http://blogs.technet.com/lrobins/archive/tags/CA/default.aspx" /><category term="windows server 2008" scheme="http://blogs.technet.com/lrobins/archive/tags/windows+server+2008/default.aspx" /><category term="certificate revocation list" scheme="http://blogs.technet.com/lrobins/archive/tags/certificate+revocation+list/default.aspx" /><category term="CRL" scheme="http://blogs.technet.com/lrobins/archive/tags/CRL/default.aspx" /><category term="IIS 7" scheme="http://blogs.technet.com/lrobins/archive/tags/IIS+7/default.aspx" /><category term="&amp;quot;+&amp;quot;" scheme="http://blogs.technet.com/lrobins/archive/tags/_2600_quot_3B002B002600_quot_3B00_/default.aspx" /><category term="delta CRL" scheme="http://blogs.technet.com/lrobins/archive/tags/delta+CRL/default.aspx" /></entry><entry><title>Virtualized Offline CAs</title><link rel="alternate" type="text/html" href="http://blogs.technet.com/lrobins/archive/2008/10/15/Virtualized-Offline-CAs.aspx" /><id>http://blogs.technet.com/lrobins/archive/2008/10/15/Virtualized-Offline-CAs.aspx</id><published>2008-10-16T00:27:00Z</published><updated>2008-10-16T00:27:00Z</updated><content type="html">First, the warnings: 1. Sometimes I am a bit of a salmon, meaning that I have a tendency to swim upstream, metaphorically speaking. More specifically, I like to take current thoughts around "best practices" and pick them apart to see if they actually make sense as a best practice. One of my favorite words is "specious". A specious argument is one that seems to make sense on the surface, but when actually evaluated, turns out not to make so much sense, after all. 2. Anything I say in this blog is...(&lt;a href="http://blogs.technet.com/lrobins/archive/2008/10/15/Virtualized-Offline-CAs.aspx"&gt;read more&lt;/a&gt;)&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3136983" width="1" height="1"&gt;</content><author><name>lrobins@microsoft.com</name><uri>http://blogs.technet.com/members/lrobins%40microsoft.com.aspx</uri></author><category term="virtualized" scheme="http://blogs.technet.com/lrobins/archive/tags/virtualized/default.aspx" /><category term="vm" scheme="http://blogs.technet.com/lrobins/archive/tags/vm/default.aspx" /><category term="certification authority" scheme="http://blogs.technet.com/lrobins/archive/tags/certification+authority/default.aspx" /><category term="certificate authority" scheme="http://blogs.technet.com/lrobins/archive/tags/certificate+authority/default.aspx" /><category term="offline" scheme="http://blogs.technet.com/lrobins/archive/tags/offline/default.aspx" /><category term="CA" scheme="http://blogs.technet.com/lrobins/archive/tags/CA/default.aspx" /><category term="online" scheme="http://blogs.technet.com/lrobins/archive/tags/online/default.aspx" /><category term="virtual" scheme="http://blogs.technet.com/lrobins/archive/tags/virtual/default.aspx" /><category term="Hyper-V" scheme="http://blogs.technet.com/lrobins/archive/tags/Hyper-V/default.aspx" /><category term="windows server 2008" scheme="http://blogs.technet.com/lrobins/archive/tags/windows+server+2008/default.aspx" /><category term="virtualize" scheme="http://blogs.technet.com/lrobins/archive/tags/virtualize/default.aspx" /><category term="hsm" scheme="http://blogs.technet.com/lrobins/archive/tags/hsm/default.aspx" /></entry></feed>