RE: CA Rekey and CRL Validation

[pgut001@xxxxxxxxxxxxxxxxx (Peter Gutmann)]

Stephen Kent <kent@xxxxxxx> writes:

>The "it just works" model is usually the starting point for a path
>that leads to failures due to a lack of forethought.

As opposed to the other approach, where you first need to produce 
2000 pages of specifications over a period of 10 years to get to the
same point.  The main difference with the "it just works" model is 
that it just works for at least some (hopefully the large majority) 
of users, and by extension it does what most users want/expect it to
do.

Peter (OK, I held back for some time there, but I just had to say it :-).