Re: RFR: 8277246: No need to check about KeyUsage when validating a TSA certificate [v2]

[Xuelei Fan]

On Nov 16, 2021, at 7:28 PM, Michael StJohns 
<mstjo...@comcast.net<mailto:mstjo...@comcast.net>> wrote:


   id-kp-timeStamping            OBJECT IDENTIFIER ::= { id-kp 8 }
   -- Binding the hash of an object to a time
   -- Key usage bits that may be consistent: digitalSignature
   -- and/or nonRepudiation

Hm, we may want to check it strictly in this update, by allowing nonRepudiation 
alternatively.

Xuelei