RE: OCSP - Wait A Minute!

Nobody is arguing that there is no value in extending OCSP to provide
additional
features. An extension mechanism has been added for that exact reason.

Adding features is not something that should be done lightly however.
Particularly
when they represent a considerable extension of the functionality of the
underlying
protocol (as this suggestion does) and even more so when the proposal
introduces
a change in the trust model of the application (as this suggestion also
does).

There is a place for such proposals of course, but not during a last call.
If there
was no mechanism for extending OCSP to provide the desired functionality it
would
be a different matter.

I would suggest that you submit your proposal as an Internet draft
describing
an OCSP extension.


                Phil