[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: POLL: Nonce-specific error code for OCSP


YES.

In general, the less information given out, the more secure the environment is. However, if I view OCSP could run in two different modes, one with nonce and one without, then, an error code will be useful to indicate which type of responder is out there. However, I agree with Denis, a resume of advantages vs disadvantages would be useful ... just do not want to miss anything.

Thanks,

Richard Sinn
Infoblox, Inc.


Michael Myers wrote:

All,

I recently received permission from the chairs to poll the WG
against the following question.

Should we standardize an OCSP *V1* error code that enables a
responder to indicate its inability to respond to nonced
requests?

Please respond with either YES or NO.

Mike