[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Certificate Expiration
-----BEGIN PGP SIGNED MESSAGE-----
At 10:18 AM 5/8/98 -0800, Bill Frantz wrote:
>I received this "Allegory for Certificate Expiration" from a friend: "A
>pilot is bringing in a 747 full of passengers for a landing. Suddenly his
>controls freeze. Some small computer in the plane notices that his license
>has just expired.
There are many certificates in use today not so much for security as for a
kind of seat license. For such a use, the freeze at expiration is totally
appropriate.
Of course, I don't like or want to encourage such a use of certificates.
The other potential meaning of an expiration date is that that's when you
predict the probability has finally exceeded your threshold of pain, that
either a key has been compromised or an authorization will have expired.
Such predictions are so loose to start with, that I suspect the failure mode
should not be hard the way it is when your seat license expires.
I'd like to hear more opinions on this issue.
- Carl
-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.5.3
iQCVAwUBNVNW3RN3Wx8QwqUtAQEroAP+MlcQwIM6zoUnYxGyff1EmZR5WFa1QfNs
kRGDcUivKAKpsZMmVdq4AYYX9aDeKSpmrAphTLzrvTgPF2QcEhxjT1xYTVssILP9
//G8Fg5cgwhvmZIc/I78h3RSfxIuet6VWMQG04q6uVW0ladjFXT3dgWkCg4cMCn+
AmL1MNGEe/g=
=Hs+F
-----END PGP SIGNATURE-----
+------------------------------------------------------------------+
|Carl M. Ellison cme@cybercash.com http://www.clark.net/pub/cme |
|CyberCash, Inc. http://www.cybercash.com/ |
|207 Grindall Street PGP 08FF BA05 599B 49D2 23C6 6FFD 36BA D342 |
|Baltimore MD 21230-4103 T:(410) 727-4288 F:(410)727-4293 |
+------------------------------------------------------------------+
Follow-Ups:
References: