50 likes | 185 Views
OCSP for PKINIT. Larry Zhu Microsoft Corporation IETF 61. Problems To Solve. Bandwidth problems with CRL Efficient caching Faster revocation Leverage better connection at the KDC. Draft Status. Lastest draft-ietf-krb-wg-ocsp-for-pkinit-01.txt. Message Syntax.
E N D
OCSP for PKINIT Larry Zhu Microsoft Corporation IETF 61
Problems To Solve • Bandwidth problems with CRL • Efficient caching • Faster revocation • Leverage better connection at the KDC
Draft Status • Lastest • draft-ietf-krb-wg-ocsp-for-pkinit-01.txt
Message Syntax PA-PK-OCSP-DATA ::= SEQUENCE OF OcspResponse OcspResponse ::= OCTET STRING -- contains a complete OCSP response, -- defined in [RFC2560]