Re: OCSP and LDAP

[lynn.wheeler@xxxxxxxxxxxxx]

the driver's license in your hand isn't the real driver's license .... it
is a r/o, stale, static copy made at some time in the past. the real
driver's license is in some agency's database record. the issue about
whether the real license is valid or not is stored there also. all the
dynamic, fresh, aggregated, and/or realtime data is stored there ... or is
pointed to by that record (if you want all the online, realtime, fresh,
dynamic and/or aggregated information ... you have to read the real
"license" record).

for low value &/or low risk operations ... the static, stale copy that you
hold will be sufficient. for situations that justify the cost of an online
transaction ... to get the real-time, fresh, dynamic, and aggregated real
information ... they go online to get the real information.

somebody types in a driver's license number to the online system ... it
could just spit back just a simple yes/no regarding the staleness of the
static, r/o copy in the person's possesion. however, if somebody is going
to the trouble of going online .... they type in the driver's license
number to the online system .... and they get back the real license, with
all the real-time, fresh, dynamic, and/or aggregated information. any
information claims by the r/o, static, stale copy in the person's position
.... at that point are redundant and superfluous.

--
Internet trivia, 20th anv: http://www.garlic.com/~lynn/rfcietff.htm