RE: OCSP-X vs SCVP

[Michael Zolotarev <mzolotarev@xxxxxxxxxxxxx>]

> 
> > >  But that ain't how the world works, and
> > > that ain't how
> > > people want it to work.
> > 
> > Proof, please. I want the proof.
> > 
> 
> The fact that people seem to care about this is proof enough for me...

MArk, this is really speculative thing to say... I don't buy it as an
argument, sorry.
> 
> 
> But I see your point.  You weren't talking about an OCSP API, 
> but instead an
> ASN.1 (as opposed to XML) API. 

No, I was talking exactly about OCSP APIs. pki_GetOCSP(). I didn;t meant
using ASN1 directly by the applications. That't be a very much wrong thing
to do.

 At that level, I agree: 
> people can pick up
> toolkits to work with either.

>  The non-PKI folk want their 
> XML apps to use
> PKI (as do the PKI folks, I might add), but they don't want 
> to bloat their
> apps with an ASN.1 toolkit.  Similarly, the PKI folk don't 
> want to bloat
> their apps with an XML toolkit.
> 
Bloat? got any real figures? 

Dont think it is a real issue with hosts and desktops. Dont think there is
an issue with mobile devices either. I am not saying it is a bloat, or it is
not. I just want some approx figures. Compare bare-minimum
ASNParser+OCSP_APIs with OCSP_XML_APIs ( for fairness I assume that XML
parser is present on the platform regardless, so it doesn't count).



> Either some non-PKI folk have to want PKI badly enough to 
> accept the bloat,
> or the PKI folk have to want to spread PKI badly enough to 
> adopt XML.  Either
> way, someone has to give.
> 
> 		Marc
> 
> +-------------------------------------------------------------
> -----------+
>  Marc Branchaud                                  \/
>  Chief PKI Architect                             /\CERT 
> INTERNATIONAL INC.
>  marcnarc@xcert.com        PKI References page:              
> www.xcert.com
>  604-640-6227          www.xcert.com/~marcnarc/PKI/
> +-------------------------------------------------------------
> -----------+
>