Blake,
It seems to me that it would be much simpler to have two separate
attributes: one for UTCTime and the other for GeneralizedTime. This
strategy allows the receiving application to quickly identify the flavor of
the signing time based on the OID identifying the attribute. IMHO, the
ChoiceOfTime just adds complexity because the receiving agent has to figure
out which choice was chosen.
- John Pawling
At 02:12 PM 11/12/97 -0800, Blake Ramsdell wrote:
On Wednesday, November 12, 1997 9:20 AM, jsp(_at_)jgvandyke(_dot_)com
[SMTP:jsp(_at_)jgvandyke(_dot_)com] wrote:
The PKCS #9 spec defines the SigningTime attribute to be UTCTime.
Propose that a new attribute should be defined called NewSigningTime that is
defined as a GeneralizedTime. If the WG agrees, then a new OID would need
to be defined to identify NewSigningTime. If the WG agrees, then the ESS
spec should be enhanced to include NewSigningTime and recommend its use
instead of SigningTime.
For compatibility, should we make this ChoiceOfTime, leave the OID the
same, and specify the same sliding window as PKIX part 1? Didn't we do
some work in this area already?
Blake
--
Blake C. Ramsdell
Worldtalk Corporation
For current info, check http://www.deming.com/users/blaker
Voice +1 425 882 8861 x103 Fax +1 425 882 8060