Re: [sidr] sidr-arch-09 refresh cycle time
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [sidr] sidr-arch-09 refresh cycle time



In the case of missing resources, it's very unlikely that someone deep
down in the chain suddenly realises "oh, I need more resource from my
grand-grand-grandparent NOW!". In the case of overclaiming, it's enough
if any one in the chain shrinks their resources, the effect is visible
in one cycle.

think someone high in chain issues cert no longer covering youtube.

randy

So they did cover it for a while, then the resource was dropped from their cert, yes? That means that cert was revoked on that level, and a new one issued. Local issue, does not propagate, therefore can be fixed immediately.

Robert

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.