Re: request for WG to adopt draft-chadwick-webdav-00.txt as a work item

[Stephen Kent <[e-mail]>]

At 4:07 PM +0530 9/6/07, George Michaelson wrote:
>...
>
>um. I'm not sure I understand the difference. In practice, where does
>an OCSP server get its information about certificate revokation, if not
>from its own trust in a repository infrastructure?

in many (most?) cases, the OCSP server gets a copy of a CRL from the 
CA and uses that as the basis for its responses.  For the lightweight 
OSCP model (recently approved as an RFC) the responses are 
pre-generated, typically based on a CRL or a privately-transmitted 
CRL-equivalent. So, OCSP is not a good example, i.e., it generally 
makes use of CRLs or their moral equivalent (transmitted securely 
from a CA).


Steve