-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

When storing a TURN-SERVICE kind, the storing peer cannot count on having the
certificate used to sign the value available locally, because the
CERTIFICATE_BY_NODE and CERTIFICATE_BY_USER kinds will be stored in a different
peer.

Is the intent that the storing peer remotely fetch the certificate for the
validation or should it fail when the certificate is not sent in the
certificates field of the SecurityBlock?

Note that if the request should fail, then it is a problem with replications as
there is very little chance to have the right certificate in the SecurityBlock
when the value is replicated.

- -- 
Marc Petit-Huguenin
Personal email: [email protected]
Professional email: [email protected]
Blog: http://blog.marc.petit-huguenin.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk4jF7QACgkQ9RoMZyVa61d/mQCgnL3vndPpYAJds03IvXnYZprE
MmsAoITz6U97WHeyIone4md7hwYFIxNW
=BPUG
-----END PGP SIGNATURE-----
_______________________________________________
P2PSIP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/p2psip

Reply via email to