Re: Updated version of "X.509 Authentication SASL Mechanism

[Steve Kille <S.Kille@isode.com>]

Chris,

I will drop this from the next version, unless I hear some very clear 
requests to keep it in!

Steve


On Wed, 01 Jul 1998 11:29:41 -0700 (PDT) Chris Newman 
<Chris.Newman@innosoft.com> wrote:

> On Wed, 1 Jul 1998, Steve Kille wrote:
> > 2) I added the "generation-time" field, and Sean questioned its use.
> > This time information is allowed in the general X.509 framework,
> > althoug X.500 does not use it.  It seems to me that the party doing
> > the authentication may have a policy on timeouts, and so this field
> > may be useful in addition to the "time" field which is set according
> > to the policy of the party being authenticated.  I'd appreciate input
> > on this.
> 
> I'd be inclined to leave it out.  While the concept of restricting the
> timeout length is interesting, I don't think it's complete without a way
> to find out the other party's policy.  Once you add policy discovery to
> the mix, it's probably too complex to be worth it for this case.
> 
> 		- Chris
> 
>