RE: OCSP response pre-production

[pgut001@xxxxxxxxxxxxxxxxx (Peter Gutmann)]

"Michael Myers" <mmyers@xxxxxxxxx> writes:

>If we don't define a nonce-specific error, it's predictable that client
>developers will choose one of the existing 5 unsigned error values in order
>to pop up a dialog that says, essentially, "You used a nonce and received an
>error.  If you want to try again not using nonces, click here."

.... which the user will mentally translate to "Quadrant change in relocatable
expression in subspace $CODE$" (yes, that's a real error message from HP-UX)
which after another level of mental translation becomes "Go boom fall down.
Click here make better".  After clicking OK, everything works again (or at
least something happens, either a cached response or a replay attack, but in
any case the annoying warning goes away so everything's all right).

Peter.