[cabfpub] Ballot 103 - OCSP Stapling Enabled

Ben Wilson ben at digicert.com
Sat Mar 8 23:29:41 UTC 2014


CA/Browser Forum Ballot 103 is still being held up from completion by the
lack of an IANA assigned Object Identifier.  Because I'm tired of waiting,
I'm suggesting the following ballot language:

G. OCSP Stapling Enabled (optional) 

Subscriber Certificates MAY contain the CA/Browser Forum Object Identifier
of 2.23.140.16.1 (ocsp-stapling-enabled) that indicates that a TLS server
has been configured to always staple its OCSP response in accordance with
RFC 6066. If present, this extension MUST NOT be marked critical. 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20140308/288c20ba/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5453 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20140308/288c20ba/attachment.p7s>


More information about the Public mailing list