[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: DISCUSS: MUST reject in OCSPv1



Unfortunately, I think the anwer to Ryan's specific question is no. If you send a nonce and get back a response without that nonce under the current spec, you know either:

a) The server does not support nonces
b) An attacker is replaying a recorded response from a nonce-supporting server

I think there needs to be another flag in the response (e.g. nonceUnsupported extension) to securely separate 'a' from 'b'.


Ryan M. Hurst wrote:

  1.
      What the responder returns if it can not return a nonce
  2.
      What the client must do when it receives a response to a nonced
      request

...

My take on #1 is that I don't see why the client needs to know that, after all if the response to a nonced request does not contain the same nonce doesn't that mean the server was unable to produce a nonced response?