OCSP - Wait A Minute!

[Anders Rundgren <anders.rundgren@xxxxxxxxx>]

Hi Dan,
I don't see how Netscape or anybody else can do packaged product
based on the OCSP-specification.  Will it be provided as a framework
where the customer does the actual implementation?  Particularly
the provider part seems pretty impossible to implement in a totally
general way.  And that is probably the way it should be.

Anyway, I think you should put OCSP *on hold* to make it more universal.
In particular the requirement to have issuers certificates requires every
certificate user to also rely on other certificate service protocols or
other unspecified methods for acquiring issuer certificates.

OCSP could *easily* do it all!

Please take a look on

http://www.jaybis.com/specifications/pkix/ocsp.html

Regards
Anders