Re: [Sidrops] Benjamin Kaduk's Discuss on draft-ietf-sidrops-6486bis-09: (with DISCUSS and COMMENT)

[Rob Austein <[e-mail]>]

On Thu, 17 Mar 2022 10:40:37 -0400, Job Snijders wrote:
...
> > > > NEW Section 4.2.1:
> > > >    Because a "one-time-use" EE certificate is employed to verify a
> > > >    manifest, the EE certificate MUST be issued with a validity period
> > > >    that coincides with the interval from thisUpdate to nextUpdate in the
> > > >    manifest, to prevent needless growth of the CA's CRL.
...
> CA operators are free to set the Manifest's eContent nextUpdate and the
> CRLs nextUpdate as far into the future as they wish, each CA needs to
> make a trade-off about how they schedule on-call on the weekends. CA
> operators can nowadays rely on RP implementations only permitting the
> narrowest validity window transitively concluded from the entire chain.

Except that you're changing the semantics of nextUpdate from "stale"
to "hard failure", which is dangerously wrong and is not what the
semantics were intended to be by the original authors before you took
up the pen.

E pur si muove.