Hi Geoff, Just considering this case:
> If a RP choses an intermediate CA as a TA then it has to factor in the > potential for the CA to perform a key rollover, and it has to perform the > switch of the locally chosen TA within <a period>. Wouldn't it be the case that since the RP perform the locally chosen TA switch until the end of <a period> it will not be able to validate the subordinate certs? Roque.
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ sidr mailing list [email protected] https://www.ietf.org/mailman/listinfo/sidr
