OCKID Question?

["Sean P. Turner" <turners@xxxxxxxx>]

Paul,

I had a read of the OCKID draft - what a novel concept :)  I'm just
curious why the only choices included are the EE, CA, AA, and bare key.
There are other things that you trust in the PKIX realm like OCSP
responders.  If the trouble was trying to profile it so that you'd know
it was and OCSP responder  you could look for id-kp-OCSPSigning OBJECT
IDENTIFIER ::= {id-kp 9} in extended key usage.  I'm sure there are
others but that's the one that popped to the top.

Cheers,

spt