<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="color: rgb(0, 0, 0);"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 10pt;">Right, I don't think it's high priority either. Just though since the BRs says "MAY comply with RFC 8954", it might as well be
updated to </span><span style="font-family: "Calibri", sans-serif; font-size: 11pt;">RFC9654.</span></div>
<div class="elementToProof" style="font-family: "Calibri", sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
Cheers,</div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
Tomas</div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature" class="elementToProof"></div>
<div id="appendonsend"></div>
<div><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr style="display: inline-block; width: 98%;">
<span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><b>From:</b> Tim Hollebeek<br>
<b>Sent:</b> Friday, October 04, 2024 4:23 PM<br>
<b>To:</b> Tomas Gustavsson; CA/B Forum Server Certificate WG Public Discussion List<br>
<b>Subject:</b> RE: OCSP Nonce RFC9654 </span>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">I mean, we could, but I don’t think it’s a particularly high priority. That RFC makes some small clarifications to corner cases involving a corner case.
I’m not sure it’s all that relevant to the WebPKI, unless someone points out a reason we need it.</span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> </span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-size: 11pt;">-Tim</span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-size: 11pt;"> </span></p>
<div style="padding: 0in 0in 0in 4pt; border-width: medium medium medium 1.5pt; border-style: none none none solid; border-color: currentcolor currentcolor currentcolor blue;">
<div style="padding: 3pt 0in 0in; border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(225, 225, 225) currentcolor currentcolor;">
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Calibri", sans-serif; font-size: 11pt;"><b>From:</b> Servercert-wg <servercert-wg-bounces@cabforum.org>
<b>On Behalf Of </b>Tomas Gustavsson via Servercert-wg<br>
<b>Sent:</b> Friday, October 4, 2024 3:05 AM<br>
<b>To:</b> CA/B Forum Server Certificate WG Public Discussion List <servercert-wg@cabforum.org><br>
<b>Subject:</b> [Servercert-wg] OCSP Nonce RFC9654</span></p>
</div>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"> </p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;"> </span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;">BRs have in section 4.9.10:</span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;"> </span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;">OCSP responders operated by the CA SHALL support the HTTP GET method, as described in RFC 6960 and/or RFC
5019. The CA MAY process the Nonce extension (</span><span style="font-family: "Courier New"; font-size: 10pt; color: black;"><code style="font-family: "Courier New";">1.3.6.1.5.5.7.48.1.2</code></span><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;">)
in accordance with RFC 8954.</span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;"> </span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;">RFC9654,</span><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: blue;"><u><a href="https://www.rfc-editor.org/rfc/rfc9654.txt" target="_blank" id="OWAbe2546ef-ac5c-05e8-3374-81ef5af8ef99" class="OWAAutoLink" rel="noopener noreferrer" style="color: blue; margin-top: 0px; margin-bottom: 0px;" data-auth="NotApplicable">https://www.rfc-editor.org/rfc/rfc9654.txt</a></u></span><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;">,
updates RFC8954.</span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;"> </span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;">Should the BRs be updated for the new RFC?</span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;"> </span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;">Cheers,</span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;">Tomas</span></p>
<p style="margin: 0in; font-family: "Aptos", sans-serif; font-size: 12pt;"><span style="font-family: "Arial", sans-serif; font-size: 10pt; color: black;"> </span></p>
</div>
</body>
</html>