Re: [pkix] Should a CRL be required for an OCSP service provider to assert status.

Stephen Kent <kent@bbn.com> Thu, 09 June 2016 15:33 UTC

To: pkix@ietf.org
References: <CAJKvcBQq_uK3H_R4Twa9T7xPO-=ySTT1aS049b9QFYGhjsP+xg@mail.gmail.com> <201606091329.u59DTR95025744@mail.nbusr.sk>
From: Stephen Kent <kent@bbn.com>
Message-ID: <57598C5B.1010808@bbn.com>
Date: Thu, 09 Jun 2016 11:33:47 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.7.2
MIME-Version: 1.0
In-Reply-To: <201606091329.u59DTR95025744@mail.nbusr.sk>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/pkix/d0UDX3KXsvwAnu8l1t06tNpQj3E>
Subject: Re: [pkix] Should a CRL be required for an OCSP service provider to assert status.
Precedence: list

Peter,

I think it's appropriate to cite X.509 text in response to Daniel's 
questions.
However, EU legislation is not the same as ITU or IETF standards, and 
one should
note that distinction, where appropriate. For example, I recall that 
PKIX did not
endorse the notion of OCSP providing an indication of a cert as valid, 
vs. not revoked,
when folks have posed that question in the past.

Steve

Re: [pkix] Should a CRL be required for an OCSP s… Stephen Kent
Re: [pkix] Should a CRL be required for an OCSP s… Martin Rex
Re: [pkix] Should a CRL be required for an OCSP s… Stephen Kent
Re: [pkix] Should a CRL be required for an OCSP s… Peter Bowen
Re: [pkix] Should a CRL be required for an OCSP s… Erwann Abalea
Re: [pkix] Should a CRL be required for an OCSP s… Stephen Kent
[pkix] Should a CRL be required for an OCSP servi… daniel bryan
Re: [pkix] Should a CRL be required for an OCSP s… Peter Rybár
Re: [pkix] Should a CRL be required for an OCSP s… Stephen Kent
Re: [pkix] Should a CRL be required for an OCSP s… daniel bryan
Re: [pkix] Should a CRL be required for an OCSP s… David A. Cooper
Re: [pkix] Should a CRL be required for an OCSP s… Martin Rex