OCSP reponses without nexUpdate
Thomas Kopp <[email protected]>
| Newsgroups | gmane.ietf.x509 |
|---|---|
| Message-ID | <[email protected]> |
Dear all, OCSP real time responders typically produce responses without a nextUpdate. RFC 6960 stipulates in section 4.2.2.1 that ... If nextUpdate is not set, the responder is indicating that newer revocation information is available all the time. It seems that the former wording is ambiguous with regard to the semantics of the word "newer". Does it mean for subsequent requests that one of the fields thisUpdate or producedAt must change even if certificate status has not changed? [LuxTrust_logo_blue_signature] Thomas KOPP Chief Scientist Email: [email protected]<mailto:[email protected]> Mobile:+352 621 229 316 Office: +352 26 68 15 - 574 LuxTrust S.A. | IVY Building | 13-15, Parc d'activités | L-8308 Capellen | Luxembourg | www.luxtrust.lu<http://www.luxtrust.lu/> [cid:[email protected]]<https://www.linkedin.com/company/luxtrust-s.a.> [Banner_Email_jobs_hiring] ________________________________ The information in this e-mail and any attachment is confidential and for use by the addressee only. Access to this e-mail by anyone else is not authorized. If you are not the intended recipient, please inform the sender and erase all copies of it from your system. Internet communications are by default not secure. LuxTrust S.A. cannot guarantee the integrity and origin of e-mails unless they have been properly digitally signed. Confidentiality of e-mails can only be guaranteed if they are encrypted properly using a secure digital certificate.LuxTrust S.A. takes precautions to ensure that e-mails are scanned for viruses but cannot accept liability for any damage sustained as a result of software viruses. ________________________________ _______________________________________________ pkix mailing list [email protected] https://www.ietf.org/mailman/listinfo/pkix
image001.png
(image/png, 2.8 KB) - not displayed
image002.png
(image/png, 2.1 KB) - not displayed
image004.png
(image/png, 75.4 KB) - not displayed