Online Certificate Status Protocol Nonce Extension
RFC 9654, “Online Certificate Status Protocol Nonce Extension”, is a Proposed Standard document published in August 2024 by H. Sharma. It updates RFC 6960. It obsoletes RFC 8954. The canonical text is published by the RFC Editor.
Abstract
RFC 8954 imposed size constraints on the optional Nonce extension for the Online Certificate Status Protocol (OCSP). OCSP is used to check the status of a certificate, and the Nonce extension is used to cryptographically bind an OCSP response message to a particular OCSP request message.
Some environments use cryptographic algorithms that generate a Nonce value that is longer than 32 octets. This document also modifies the "Nonce" section of RFC 6960 to clearly define and differentiate the encoding format and values for easier implementation and understanding. This document obsoletes RFC 8954, which includes updated ASN.1 modules for OCSP, and updates RFC 6960.
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 9654 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9653 Zero Checksum for the Stream Control Transmission Protocol
- RFC 9655 Egress Validation in Label Switched Path Ping and Traceroute Mechanisms
- RFC 9652 The Link-Template HTTP Header Field
- RFC 9656 A YANG Data Model for Microwave Topology
- RFC 9651 Structured Field Values for HTTP
- RFC 9657 Time-Variant Routing Use Cases
- RFC 9650 Revision to Registration Procedures for IS-IS Neighbor Link- Attribute Bit Values
- RFC 9658 Multipoint LDP Extensions for Multi-Topology Routing