Re: Sometimes Ignoring Time on Certificates (Was: Re: Docs we will need)

2019-02-10 Thread Richard Laager via devel
On 2/6/19 11:34 AM, Eric S. Raymond wrote: > Richard Laager via devel : >> On 2/5/19 7:49 PM, Richard Laager wrote: >>> I have a specific proposal that I'll hopefully write up tonight, which >>> may address the needs in this space. >> I did some brainstorming on this with a colleague. I initially s

Re: Sometimes Ignoring Time on Certificates (Was: Re: Docs we will need)

2019-02-06 Thread Hal Murray via devel
Mark said: > This sounds somewhat similar to the brilliant hack that is > https://github.com/ioerror/tlsdate Brilliant? Maybe if you do it for yourself. Not if you publish it in a way that encourages others to do it. https://en.wikipedia.org/wiki/NTP_server_misuse_and_abuse#Tardis_and_Trinit

Re: Sometimes Ignoring Time on Certificates (Was: Re: Docs we will need)

2019-02-06 Thread Mark Atwood, Project Manager via devel
This sounds somewhat similar to the brilliant hack that is https://github.com/ioerror/tlsdate On Wed, Feb 6, 2019 at 9:34 AM Eric S. Raymond via devel wrote: > Richard Laager via devel : > > On 2/5/19 7:49 PM, Richard Laager wrote: > > > I have a specific proposal that I'll hopefully write up to

Re: Sometimes Ignoring Time on Certificates (Was: Re: Docs we will need)

2019-02-06 Thread Eric S. Raymond via devel
Richard Laager via devel : > On 2/5/19 7:49 PM, Richard Laager wrote: > > I have a specific proposal that I'll hopefully write up tonight, which > > may address the needs in this space. > I did some brainstorming on this with a colleague. I initially started > with an approach that would consider t

Sometimes Ignoring Time on Certificates (Was: Re: Docs we will need)

2019-02-06 Thread Richard Laager via devel
On 2/5/19 7:49 PM, Richard Laager wrote: > I have a specific proposal that I'll hopefully write up tonight, which > may address the needs in this space. I did some brainstorming on this with a colleague. I initially started with an approach that would consider the system clock (if after BUILD_EPOCH