Re: Revisited: effect of Start TLS on authentication state

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

Kurt D. Zeilenga writes:
>At 12:38 AM 12/6/2003, Hallvard B Furuseth wrote:
>>> The decision to keep or invalidate the established authentication
>>> and authorization identities in place after TLS closure is a matter
>>> of local server policy.
>>
>>Why?
> 
> The rationale is that servers are allowed, for any reason,
> to invalidate the LDAP association.  It makes no sense to
> say that they cannot do that as a result of TLS closure
> when they could do otherwise.

I don't understand.  Why can't they do it after TLS closure if it isn't
spelled out in the section of TLS closure section?  Why is not spelling
it out there different from not spelling it out in the Delete operation
section (since Delete can delete the DN which the user was bound as)?

-- 
Hallvard