Re: response to unauthorized OCSP reques

[Andreas Berger <aberger@xxxxxxxxxxxxxxxx>]

Graham Bland wrote:
> 
> There is a sigRequired error response which specifically covers this
> situation.
I interpreted it as: A rquester sends an unsigned request. The OCSP
responder does not want to act on this request, since it is unsigned.
Therefore it answers with sigRequired, advising the requester to
re-issue the request but this time signed.

An unauthorized request sounds sensible to me. It can also be used if
the responder bases its decision not to serve the request on other data
(i.e. the request is unsigned).

Andreas
-- 
Fifty-three percent of Fortune 1000 executives think the
Arch Deluxe is something that helps to run a computer.
-- Jericho Communications