[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [IETF-PKIX] OCSP Status Information on a Certificate



And in the event a client receives {is revoked, not issued}, which
dominates?  Similarly, {not revoked, not issued}.  I remain unconvinced this
is no problem.  As soon as OCSP clients are out there in any volume, there
are those who will seek to determine the client's behavior in fringe cases.



> -----Original Message-----
> From: IETF X.509-based public key infrastructure mailing list
> [mailto:IETF-PKIX@LISTS.TANDEM.COM]On Behalf Of David P. Kemp
> Sent: Friday, April 17, 1998 8:14 AM
> To: IETF-PKIX@LISTS.TANDEM.COM
> Subject: Re: [IETF-PKIX] OCSP Status Information on a Certificate
>
>
> > From: Denis Pinkas <Denis.Pinkas@bull.net>
> >
> > More exactly:
> >
> > it MUST issue one booolean  : certificate is revoked / is not revoked
> > it MAY issue another boolean: certificate was issued / was not issued
>
>
> I agree with Denis.
>