> On 27 Jan 2022, at 4:45 pm, Yaron Sheffer <yaronf.i...@gmail.com> wrote: > > So our plan moving forward is to essentially keep the new text on OCSP [1] > and add a reference to RFC 7633 (the certificate must-staple extension). But > only as a MAY. In addition, we will add a MUST requirement to perform (some > kind of) revocation checking.
Usual lack of Internet Police noted, I feel I should mention that this "MUST" *will* be ignored in various quarters. I still have no plans to implement any revocation checks in Postfix, too much pain for too little (or no) gain. -- Viktor. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls