Date: Tue, 14 Apr 92 09:58:45 -0400
From: Steve Kent <kent(_at_)BBN(_dot_)COM>
Sender: pem-dev-relay(_at_)TIS(_dot_)COM
Burt,
I think your proposed conventions, which should be explcitly
specified in the FORMS RFC, would be just fine. I appreciate your
willingness to compromise in an effort to move forward as quickly as
possible.
What does everyone else think?
I agree. In fact one of the "features" of this approach is the retention
of the validity interval. The requester of a certificate may well wish
to specify a validity interval which is different from the "default"
that the issuer might otherwise use (but of course the issuer will need
to judge whether the request is acceptable, what happens if it isn't is
a local matter (or a function of CA/PCA policy)).
-Jeff