Subject: Re: [pkix] Whitelisting

From: Peter Gutmann <[email-masked]>
Date: Sun, 19 May 2013 01:43:26 +0000

Martin Rex <[email-masked]> writes:

>I assume Erik was asking about an OCSP Extension "Proof of cert issuance",
>such as a CertHash included with an OCSP "good" status.
>
>One example for an "existing solution" was mentioned by Johannes Merkle and
>is quoted here:
>
>http://www.ietf.org/mail-archive/web/pkix/current/msg32667.html

Another solution, which has been around as long as OCSP has, is RTCS, which
was desgined to fix all (known) problems with OCSP:

http://tools.ietf.org/html/draft-gutmann-cms-rtcs-01

Peter.