At 8:45 AM -0500 6/14/10, George, Wes E IV [NTK] wrote:
... (We do not plan to provided a detailed discussion regarding
emergency key rollover in this document unless the WG requires such.)
[[WEG]] I think that depends on your definition of "detailed" as to
whether I'm ok with that. Is that one sentence the sum total of your
planned discussion, or are you going to expand it somewhat?
I envision saying only that an emergency key rollover requires
immediate revocation of the old CA cert and issuance of a new one,
and thus there is may be no overlap period (unless the emergency
rekey takes place during a planned rollover).
Depending on the order of the final document, you may need to
explain the difference in general terms - the idea of immediate
revocation as a difference won't be obvious if you haven't yet
discussed old and new key existing in parallel for some period of
time as in a scheduled roll.
good point.
Also, either way I think you need to discuss what immediate
revocation means in terms of the behavior of the system. You imply
that it's virtually a requirement to have an overlap period since
there is no coordinated change, so I think you need to discuss at
least in general terms what happens if you forego the overlap period
with an immediate revocation, and how to mitigate any issues that
arise from that, even if it's to recommend that emergency rolls
require some means of coordination to minimize their impact.
another good point. I can see that we probably will need a few
paragraphs to address your comments.
And yes, I realize that coordination, especially on an emergency
timeline may be impossible, so it may be up to the community to look
at the potential impact and say, "go back to the drawing board" or
accept it as-is and hope that there is never an emergency.
OK.
Steve
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr
