nonceUnsupported does not preclude the use of OCSP responses in the TLS handshake. My concern was ensuring what ever new text is added to v1 does not preclude this use case. In particular a client that receives an ocsp response that includes a nonce in a handshake must not reject the response because it contains a nonce it didn't generate. Alex > -----Original Message----- > From: Marc Branchaud [mailto:marcnarc@xxxxxxxxxxxxxxx] > Sent: Monday, December 08, 2003 3:59 PM > To: ietf-pkix@xxxxxxx > Subject: Re: OCSP in TLS handshake > > > Marc Branchaud wrote: > > > > I'm not trying to be obtuse here (it actually takes very little > > effort), > > but I really need a patient explanation of why nonceUnsupported > > precludes the use of OCSP responses in the TLS handshake. > > OK, I'd settle for an impatient explanation... > > M. >
Attachment:
smime.p7s
Description: S/MIME cryptographic signature