Re: OCSP-X vs SCVP

[Marc Branchaud <marcnarc@xxxxxxxxx>]

OK, this is going nowhere, and I don't care enough about it to continue.  I'd
really like to see this thread get onto deciding between the two protocols,
so I'll shut up.

		Marc

+------------------------------------------------------------------------+
 Marc Branchaud                                  \/
 Chief PKI Architect                             /\CERT INTERNATIONAL INC.
 marcnarc@xcert.com        PKI References page:              www.xcert.com
 604-640-6227          www.xcert.com/~marcnarc/PKI/
+------------------------------------------------------------------------+


Michael Zolotarev wrote:
> 
> >
> > > >  But that ain't how the world works, and
> > > > that ain't how
> > > > people want it to work.
> > >
> > > Proof, please. I want the proof.
> > >
> >
> > The fact that people seem to care about this is proof enough for me...
> 
> MArk, this is really speculative thing to say... I don't buy it as an
> argument, sorry.
> >
> >
> > But I see your point.  You weren't talking about an OCSP API,
> > but instead an
> > ASN.1 (as opposed to XML) API.
> 
> No, I was talking exactly about OCSP APIs. pki_GetOCSP(). I didn;t meant
> using ASN1 directly by the applications. That't be a very much wrong thing
> to do.
> 
>  At that level, I agree:
> > people can pick up
> > toolkits to work with either.
> 
> >  The non-PKI folk want their
> > XML apps to use
> > PKI (as do the PKI folks, I might add), but they don't want
> > to bloat their
> > apps with an ASN.1 toolkit.  Similarly, the PKI folk don't
> > want to bloat
> > their apps with an XML toolkit.
> >
> Bloat? got any real figures?
> 
> Dont think it is a real issue with hosts and desktops. Dont think there is
> an issue with mobile devices either. I am not saying it is a bloat, or it is
> not. I just want some approx figures. Compare bare-minimum
> ASNParser+OCSP_APIs with OCSP_XML_APIs ( for fairness I assume that XML
> parser is present on the platform regardless, so it doesn't count).
> 
> > Either some non-PKI folk have to want PKI badly enough to
> > accept the bloat,
> > or the PKI folk have to want to spread PKI badly enough to
> > adopt XML.  Either
> > way, someone has to give.
> >
> >               Marc