RE: DPD & DPV Basics

[Stephen Kent <kent@xxxxxxx>]

Carlin,

The examples you cite of benefits from having cert chains returned by 
a DPD server, even if not strictly valid, are examples of the R&D 
problem area I alluded to in earlier messages. I don't think we have 
a good set of parameters to express the "not quite valid, but maybe 
close enough to be useful" notion you are describing.  We would need 
a specific set to be part of the spec, else we will not be able to 
have a good spec for server operation, nor for client control of 
server operation.  So, I'd discourage heading down this path uless we 
have such a set of parameters, and Wg agreement on their desirability 
and completeness.

Steve