RE: DPD & DPV requirements - Recursion Issues

["Michael Myers" <myers@xxxxxxxxxxxxx>]

Steve,

> On Thursday, January 11, 2001 1:35 PM you wrote
>
> Since we don't trust DPD servers per se, the only issue I see here is
> whether the DPD server to which a request was made can return OCSP
> responses that were gathered by other DPD servers, without making
> that obvious to the client. I'll rely on Ambarish or Mike to answer
> that question, since I don't recall the format details well enough.

Given that OCSP may in the long run wholly replace CRLs in some environments
it does see prudent that the DPD response structure enable this option.

With regard to client notification of a DPD server's response content, note
that BasicOCSPREsponse syntax requires inclusion of ResponderID, either by
name or key hash.  Either would enable a client to identify the source(s) of
information accumulated by a DPD server in its interaction with secondary,
tertiary, etc. DPD servers.

Mike