Re: multiple digitale signatures

[Juergen Brauckmann <brauckmann@xxxxxxxxxxxxxx>]

Hi.

Sönke Maseberg wrote:
> 1. multiple digital signatures
> we would  like to extend OCSP responses [RFC 2560] and CRLs (Certificate
> and CRL Profile) [<draft-ietf-pkix-new-part1-04.txt>] with multiple
> digital signatures in the following manner:

Why do you want to do that? If a client has an old OCSP response with an
expired algorithm, then the client could simply request a new OCSP
response.

If the old OCSP response is that important that you must reuse it, then
you may use timestamps.

I think it would be a big performance burden on the OCSP responder if it
would be forced to sign the response multiple times.


Regards,
   Juergen