At 9:11 AM -1000 7/31/07, Randy Bush wrote:
> The question was what if an ISP receives two, adjacent allocations
from the SAME source at different times, and the source refuses to
issue one cert for both allocations, because they have different
validity periods.
and we agreed many moons ago that the issuer would not play silly games
with validity periods.
for once, can we see if we can do the simple thing and not look for how
complex we can make it by pushing functionally useless corner cases?
randy
Randy,
I'd rather have just one signature on a ROA, to make life as simple
as possible.
But, I also was "sensitized" to the notion of not imposing undue
restrictions on how a registry operates.
So, if a registry drives cert issuance based on its allocation
database, and if that database treats two allocations as having
different lifetimes, based on when they were made, when fees are
assessed, etc., I don't know how to reconcile both sets of goals.
Steve
_______________________________________________
Sidr mailing list
[email protected]
https://www1.ietf.org/mailman/listinfo/sidr
