OCSP-X vs SCVP

[Russ Housley <housley@xxxxxxxxxx>]

A few weeks ago, there was a brief discussion of OCSP-X vs SCVP.  The only 
consensus point was that we need to have one PKIX solution for 
certification path validation, not two.  However, we did not pick one of 
these two alternatives.  I think we need to pick one.  We should not put 
further efforts into two solutions.

There are at least three communities that need to be served by this 
protocol: very lightweight clients, organizations that want centralized 
control, and clients that do not parse ASN.1 but understand XML.  I am not 
sure that there is consensus about these user groups.  If not, we need to 
get to consensus ...

If these are the user groups that we are trying to satisfy, then I think 
that SCVP is the better answer.

Let the debate begin ...

Russ