28 Jan
2015
28 Jan
'15
2:55 a.m.
On Tue, Jan 27, 2015 at 08:12:40PM -0500, John wrote:
Darn you Mr Dukhovni, there I was drifting along in blissful ignorance, now you have made think ;) Now I have to investigate sig-validity-interval, ha well.
No, you really DON'T! That comment was for anyone on this list with a 24-by-7 operations team, and DANE records that protect something of value, where reasonably timely "revocation" is wanted.
With inline signing, how much extra work do you think will/would be involved.
These aren't the droids you're looking for.
--
Viktor.