[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: OCSP response pre-production



> Michael Myers
> -------------
> > > The core issue is absolute certainty at the relying
> > > party (i.e. client-side) whether or not their nonce
> > > will be respected.
> 
> Florian Oelmaier
> ----------------
> > Dont try to explain a political decision with
> > technical issues.
> 
> 
> Florian,
> 
> Secure acquisition of the revocation status of a certified 
> public key is not a political issue.
> 

Sorry Mike. I was too emotional about that "political" thing. I hope you
accept my sincere apologies.

On the technical side: I also was to fast with my agreement to your
proposal. Seeing that OCSP-Errorcodes are not signed, I cannot find the
benefit in your proposal. Maybe I miss something - but it seems to offer
only little advantage at significant cost.

-- 
Florian Oelmaier
SyTrust