Subject: AIA for OCSP

From: Ambarish Malpani <[email-masked]>
Date: Fri, 30 Aug 2002 09:15:43 -0700

Hi Carol,
    We support both mechanisms (in our toolkit). The other option
is to have a single fully qualified domain name map to multiple
IP addresses (if this is a mechanism being used by the responder
to provide redundancy).

Regards,
Ambarish

---------------------------------------------------------------------
Ambarish Malpani
Chief Architect                                          650.567.5457
ValiCert, Inc.                                  [email-masked]
1215 Terra Bella Ave.                         http://www.valicert.com
Mountain View, CA 94043

> -----Original Message-----
> From: carol [mailto:[email-masked]]
> Sent: Wednesday, August 28, 2002 6:15 PM
> To: [email-masked]
> Subject: 
> 
> 
> 
> ietf-pkix Hello everybody,
> 
>    In our CA system, their are several ocsp responders. One 
> can ask two ocsp responders
>    for the status of a certficate, for example http://global 
> and http://local . 
>    In such situation, what should be the AuthorityInfoAccess 
> extension like?
> 
>    case 1: only one AccessDescription node in 
> AuthorityInfoAccessSyntax
> 
>      AccessMethod  : id-at-ocsp
>      AccessLocation(URI): http://global;http://local
>    
>    case 2: set two  AccessDescription nodes in 
> AuthorityInfoAccessSyntax
>      AccessMethod  : id-at-ocsp
>      AccessLocation(URI): http://global
> 
>      AccessMethod  : id-at-ocsp
>      AccessLocation(URI): http://local
> 
>    Which of the above is more preferable? Or is there any 
> standard/suggestion
>    for such situation?
> 
>    Thanks a lot for any answer.
> 
>  wcarol
>