[IETF-PKIX] OCSP using SSL/https

[Dan Laska <danl@xxxxxxxxxxxxxxxx>]

It seems that the main purpose of having signed responses in OCSP
is to authenticate the responder.

Would it be useful, and perhaps simplify things, to permit SSL/https
to be used in the protocol instead of requiring signed responses over
http?

I am assuming here that the responder is tightly coupled to the CA.
If the responder's site certificate is revoked then the responder
itself would have to get disabled or updated by the CA.

==========================================
Dan Laska
Frontier Technologies Corp.
Email: danl@frontiertech.com
==========================================