Re: OCSP nonce was: RE: cvscommit:openssl/ssls3_lib.cssl.hssl_algs.cssl_ciph.cssl_locl.h tls1.h

[Richard Levitte - VMS Whacker]

From: Michael Ströder <[EMAIL PROTECTED]>

michael> At least in a company's networks it's not a big deal to synchronize
michael> the time of Windows work stations within e.g. a NT domain. Average
michael> Joe at home behind his dial-up modem line will not use OCSP anyway.

Oh yes he will, as soon as the browsers start using them.  Have you
checked Mozilla or Netscape 6?  IIRC, they can be configured to use
OCSP for certificate verification...

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]