OCSP reponses without nexUpdate

Thomas Kopp <[email protected]>
Newsgroups gmane.ietf.x509
Message-ID <[email protected]>
Dear all,

OCSP real time responders typically produce responses without a nextUpdate. RFC 6960 stipulates in section 4.2.2.1 that ...

If nextUpdate is not set, the responder is indicating that newer revocation information is available all the time.

It seems that the former wording is ambiguous with regard to the semantics of the word "newer".
Does it mean for subsequent requests that one of the fields  thisUpdate or producedAt must change even if certificate status has not changed?

[LuxTrust_logo_blue_signature]
Thomas KOPP
Chief Scientist

Email: [email protected]<mailto:[email protected]>
Mobile:+352 621 229 316
Office: +352 26 68 15 - 574
LuxTrust S.A. |  IVY Building | 13-15, Parc d'activités | L-8308 Capellen | Luxembourg | www.luxtrust.lu<http://www.luxtrust.lu/>

[cid:[email protected]]<https://www.linkedin.com/company/luxtrust-s.a.>
[Banner_Email_jobs_hiring]
________________________________
The information in this e-mail and any attachment is confidential and for use by the addressee only. Access to this e-mail by anyone else is not authorized. If you are not the intended recipient, please inform the sender and erase all copies of it from your system. Internet communications are by default not secure. LuxTrust S.A. cannot guarantee the integrity and origin of e-mails unless they have been properly digitally signed. Confidentiality of e-mails can only be guaranteed if they are encrypted properly using a secure digital certificate.LuxTrust S.A. takes precautions to ensure that e-mails are scanned for viruses but cannot accept liability for any damage sustained as a result of software viruses.
________________________________

_______________________________________________
pkix mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/pkix
image001.png (image/png, 2.8 KB) - not displayed
image002.png (image/png, 2.1 KB) - not displayed
image004.png (image/png, 75.4 KB) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.