On Thu, 23 Mar 2023 01:55:06 +0900
Seo Suchan <[email protected]> wrote:

> I think it's pretty safe to say IFF ARI time changes from what it's
> set just after certificate creation, you could guess there will be 
> revocation for that leaf certificate.

I don't think that's a safe assumption - the CA could be adjusting its
renewal window for all certificates.

There are probably other heuristics that could be used (like whether
the window differs significantly from other certificates issued by the
CA), or you could try to scrape explanationURL, but it would be much
more reliable if this could just be conveyed in the ARI document.

Regards,
Andrew

_______________________________________________
Acme mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/acme

Reply via email to