RE: OCSP response pre-production

["Florian Oelmaier" <oelmaier@xxxxxxxxxxx>]

> >I think in the long run this will harm the security of the protocol.
> >Major software vendors implementing OCSP-clients have to support 
> >OCSP caching.
> 
> Why? They could just support remembering one bit that says whether or 
> not the server handles nonces. A setting of "don't send a nonce" 
> could be cleared every 100 or so requests, leading to an increase of 
> about 1% of the load for both the client and the server.

I know that this is possible. But I dont think many vendors will do it -
if you dont write it down into the RfC. So if you want such a thing to
happen, just state it in the RfC please.

-- 
Florian Oelmaier
SyTrust