[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: OCSP in TLS handshake

To: ietf-pkix@xxxxxxx
Subject: Re: OCSP in TLS handshake
From: Marc Branchaud <marcnarc@xxxxxxxxxxxxxxx>
Date: Wed, 10 Dec 2003 09:07:39 -0800
In-reply-to: <>
List-archive: <http://www.imc.org/ietf-pkix/mail-archive/>
List-id: <ietf-pkix.imc.org>
List-unsubscribe: <mailto:ietf-pkix-request@imc.org?body=unsubscribe>
References: <> <>
Sender: owner-ietf-pkix@xxxxxxxxxxxx
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6b) Gecko/20031110

Marc Branchaud wrote:

In that case, you're not talking about a real OCSP client

Turns out the TLS client can generate a nonce that the TLS server would forward to the OCSP server.

Mea culpa.

M.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

References:
- RE: OCSP in TLS handshake
  - From: Deacon, Alex
- Re: OCSP in TLS handshake
  - From: Marc Branchaud

Prev by Date: Re: Cached OCSP responses vs. single entry CRLs
Next by Date: RE: Cached OCSP responses vs. single entry CRLs
Previous by thread: Re: OCSP in TLS handshake
Next by thread: Lightweight OCSP Profile for high volume environments...
Index(es):
- Date
- Thread