[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Why is privateKeyUsagePeriod deprecated?


At 21:02 +1200 7/25/03, Peter Gutmann wrote:
Tom Gindin <tgindin@xxxxxxxxxx> writes:

  The validity period for a certificate is the period of time from notBefore
  through notAfter, inclusive.  When an RP is validating the signature on a
  document which claims to have been signed or produced at a given past time,
  the RP SHOULD proceed with the verification of the signature if that time is
  within the validity period even though the time of verification is outside
  it. If the RP requires authoritative proof either of the time at which the
  document was signed or of the certificate's not having been revoked, it MAY
  reject the signature.

That works for me. Russ, any chance of getting this added to bride-of-3280?

Peter.

Peter,

Also, when we have SCVP in place, it make explicit provision for asking the "was it valid then" question, which would address this problem.

Steve