On Thu, Jul 07, 2016 at 08:08:11PM -0400, Kyle Rose wrote: > On Thu, Jul 7, 2016 at 6:13 PM, Ilari Liusvaara <ilariliusva...@welho.com> > wrote: > > > > > I also checked if one could do some funky stuff with credential lifetime > > notation to limit the lifetime. Nothing came up (apart for using 16-bit > > count in decaseconds (das) only allowing presenting lifetimes up to 7 > > days, 14 hours, 2 minutes and 30 seconds). :-> > > > > What would it be anchored to if it's not an absolute time?
There is validity start time in there, the relative end time would be relative to that. That is, instead of saying "this is valid from t1 to t2", saying "this is valid from t to t+dt". No real perference either way, it was just an experiment to play with time notations. -Ilari _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls