[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Discussion of notareqs document



> Well that is the general problem. Legislation states that 
> post-festum revocation is not allowed, meaning the time of 
> revocation can not be defined before the time when revocation 
> was requested. It may take some time before next CRL is 
> published, so when this information is published is the main 
> issue. If we consider that time stops at the time of 
> processing, some attestation could be produced. The practice? 
> I am not sure....

CRLs do not provide a means of determining "when revocation was requested"
vs. the revocation time included in the CRL.  That must be enforced by the
CRL issuer.
 
> Also, TAS performs its own validation at time T1 and by that 
> states that signature existed at T1. Post-festum validation 
> should only provide information that nothing really happened 
> before T1....

OK, but a TAS may archive an invalid signature (or evidence of invalidity).