[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Dangling phase 2 SAs (was RE: issues from the bakeoff)
Michael,
The generic reason for revoking a cert, is that some value in the attribute
set in the cert is not longer valid. In the case of compromise, the public
key is no longer consoidered to be accurately bound to the subject name.
In general, an access control decision might be based on one of the other
attributes that might have been the reason for the revocation, hence it is
appropriate to consider killing an SA when a cert has been revoked that was
used to authenticate a party to the SA. It may be overkill, but there are
times when it wouldbe appropriate. Thus a safe reponse, in general, would
be to kill off the SA.
Steve
References: