Re: cvs commit: openssl/crypto/ocsp ocsp.h ocsp_err.c ocsp_vfy.c

[Richard Levitte - VMS Whacker]

From: [EMAIL PROTECTED]

rsalz> In my experiences, Richard's use model is the most common
rsalz> method of OCSP deployments.

Uhmmm, it is definitely so for many intra-things (intranets and
similar stuff).  CA's probably use the CA certificate to sign, or
their own Authorized Responder.

Also, IIRC, Valicert intended to set up a global responder (and
therefore will sign with an Authorized Responder certificate).  I've
no idea how far they've come today...

-- 
Richard Levitte   \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]