Understanding OSCP nonce support
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
When reading about OCSP in general I see that each request / response pair supports the use of a nonce to help guard against replay attacks.
Hence I was surprised to read at https://github.com/cloudflare/cfssl/blob/master/ocsp/responder.go#L227 that `We don't intend to support nonces` - would you mind describing why this is the case?
Contributor guide
Assessment
This issue has not been assessed yet.