RE: OCSP response pre-production

[Paul Hoffman / IMC <phoffman@xxxxxxx>]

At 5:45 PM +0000 9/30/03, Florian Oelmaier wrote:
> I think in the long run this will harm the security of the protocol. 
> Major software vendors implementing OCSP-clients have to support 
> OCSP caching.

Why? They could just support remembering one bit that says whether or 
not the server handles nonces. A setting of "don't send a nonce" 
could be cleared every 100 or so requests, leading to an increase of 
about 1% of the load for both the client and the server.

--Paul Hoffman, Director
--Internet Mail Consortium