207
edits
Apps/WebApplicationReceipt/GenerationService: Difference between revisions
Jump to navigation
Jump to search
Apps/WebApplicationReceipt/GenerationService (view source)
Revision as of 17:20, 28 March 2012
, 28 March 2012no edit summary
No edit summary |
No edit summary |
||
| Line 67: | Line 67: | ||
The straightforward approach is to place them on an SSL-protected website. We would then be vulnerable to any attack which can compromise SSL. | The straightforward approach is to place them on an SSL-protected website. We would then be vulnerable to any attack which can compromise SSL. | ||
== Action Items == | |||
* Who :: What :: By when | |||
* Bill to verify with Justin about plan for receipt revocation | |||
* Need to design and implement a receipt reissue system | |||
* Review to verify daily keys are correctly destroyed each day | |||
* Need to alter receipt verification to cope with the proposed signing chain | |||
* need to define process for recovation/re-issue of root key | |||