Subject: Role of New Extension in CRL in OCSP Environments

From: "Santosh Chokhani" <[email-masked]>
Date: Thu, 4 Nov 2004 07:17:37 -0500

All,
 
There is another benefit of the extension I have proposed for CRL (SEQUENCE
or SET of Key Hashes).
 
When an OCSP Responder gets a CRL, it could save this extension with the
revocation state table for the CA.  When the Responder gets a request, the
key hash in the request can be matched to one of these values for the
specified CA.  If none matches, the Responder should return UNKNOWN.
 
In summary, this extension will permit the Responder to associate the client
request with the CA.

Santosh Chokhani 
Orion Security Solutions, Inc. 
1489 Chain Bridge Road, Suite 300 
McLean, Virginia 22101 
(703) 917-0060  Ext. 35 (voice) 
(703) 917-0260 (Fax) 
[email-masked] 
Visit our Web site 
http://www.orionsec.com <http://www.orionsec.com/>