[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: validity time suggestion



> An option for a certificate validity period could be "valid until event X
> occurs" (the example event used was the commit or abort of a transaction).
> 
> This sounds like a fine idea to me.
> 
> Reactions?

Good idea as long as you can figure out how to name "event X" in an
unambiguous way (so that certificate evaluators can know when to
approve/deny/give up).

I also think you might want a "not valid after time T" in some cases
as well.

Conceptually, in this scheme, you can implement CRL's as a "valid
until xxx appears in a CRL issued by CA"

					- Bill

References: