Policy-Discussion

[<Lambert.Hofstra AT ins.com>]

Philipp wrote:
> > So I would say: revoke all certs at time of leave (date X).
> > This does not invalidate the cert completely, it just says that
> > anything signed after date X is not valid
> 
> Most software handles revocation by invalidating all signatures before
> date X retroactively as well.
>
I don't think that is the issue: CAcert should focus on how revocation should 
work, not how some software incorrectly handles revocation.



Lambert