[cabfpub] OCSP Stapling and Short-Lived Certificates Proposal

[Eddy Nigg (StartCom Ltd.)]

On 03/25/2013 12:42 PM, From Yngve N. Pettersen:
> This is the reason why I would have preferred that OCSP stapled 
> responses had a freshness requirement, meaning that they would have to 
> be refetched (and regenerated) every few hours, no matter that it is 
> nominally valid for days. 

+1


Regards
Signer: 	Eddy Nigg, COO/CTO
	StartCom Ltd. <http://www.startcom.org>
XMPP: 	startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: 	Join the Revolution! <http://blog.startcom.org>
Twitter: 	Follow Me <http://twitter.com/eddy_nigg>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20130325/5458c378/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4540 bytes
Desc: S/MIME Cryptographic Signature
Url : https://cabforum.org/pipermail/public/attachments/20130325/5458c378/attachment-0001.bin