RE: DPD & DPV requirements - Let us Recurse

["Covey, Carlin" <ccovey@xxxxxxxxxx>]

Steve Kent's DPD/DPV requirements, the SCVP proposal, and the OCSP DPD proposal all permit OCSP responses

to be returned to the client as revocation status data.  Presumably in each case this refers to OCSP v1 basic responses,

at least.  This is all well and good, but would it not be desirable to also permit recursion in the DPD response?  That is, the DPD

response might include an embedded DPD response from another server.  Among other benefits, this would preserve the

timestamp (if any) on the embedded DPD response.

 

- Regards

  Carlin Covey

  Cylink Corp.