Re: [pkix] Should a CRL be required for an OCSP service provider to assert status.

Stephen Kent <kent@bbn.com> Tue, 28 June 2016 18:36 UTC

To: mrex@sap.com
References: <20160615113229.EC72D1A4E5@ld9781.wdf.sap.corp>
From: Stephen Kent <kent@bbn.com>
Message-ID: <52e75636-7cd1-3af5-f9ae-731e1dc1d047@bbn.com>
Date: Tue, 28 Jun 2016 14:36:40 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.1.1
MIME-Version: 1.0
In-Reply-To: <20160615113229.EC72D1A4E5@ld9781.wdf.sap.corp>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/pkix/eg3s3LPuXBEB2a85t6LA6wVcMAI>
Cc: pkix@ietf.org
Subject: Re: [pkix] Should a CRL be required for an OCSP service provider to assert status.
Precedence: list

Martin,



> ...
> The really interesting change was the change in the definition of
> "revoked", where an updated OCSP responder can report "revoked"
> in situations where the previous spec sort-of implied "good".
To which text, specifically, are you referring?

Steve

Re: [pkix] Should a CRL be required for an OCSP s… Stephen Kent
Re: [pkix] Should a CRL be required for an OCSP s… Martin Rex
Re: [pkix] Should a CRL be required for an OCSP s… Stephen Kent
Re: [pkix] Should a CRL be required for an OCSP s… Peter Bowen
Re: [pkix] Should a CRL be required for an OCSP s… Erwann Abalea
Re: [pkix] Should a CRL be required for an OCSP s… Stephen Kent
[pkix] Should a CRL be required for an OCSP servi… daniel bryan
Re: [pkix] Should a CRL be required for an OCSP s… Peter Rybár
Re: [pkix] Should a CRL be required for an OCSP s… Stephen Kent
Re: [pkix] Should a CRL be required for an OCSP s… daniel bryan
Re: [pkix] Should a CRL be required for an OCSP s… David A. Cooper
Re: [pkix] Should a CRL be required for an OCSP s… Martin Rex