[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [dss-x] nonce support for RFC 3161 timestamp missing?
Hi,I agree that it seems that the request does not incorporate the nonce...but in the RFC3161 there is also another field: reqPolicy, which I am not sure can be asimilated to the ServicePolicy...if we are going to "mimic" the request from the RFC 3161, shouldn't mimic also this field?. I am not saying that we should exactly mimic, just that if we add the nonce, maybe we should also add the reqPolicy, unless we clearly feel that the servicePolicy element could play the same role
Regards Juan Carlos. El 21/3/17 a las 13:22, Mr. Stefan Hagen escribió:
Hi Andreas, On 21/03/17 13:15, Andreas Kuehne wrote:Hi experts, I just came across the nonce element in the RFC 3161 : "The nonce [...] allows the client to verify the timeliness of the response when no local clock is available. [...] the same nonce value MUST be included in the response " We do mention the nonce in the core document but only in terms of verification processing. I can't find a way to include a nonce value in a request. Did we just forget to mention the optional input 'Nonce'? If yes, it would be a good moment to add it into the refurbished core ;-)the latter and yes the suggested remediation also :-) Thank you! Best, Stefan
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]