Apps/WebApplicationReceipt/GenerationService: Difference between revisions

Apps/WebApplicationReceipt/GenerationService (view source)

381 bytes removed , 6 April 2012

canmove, Confirmed users, Bureaucrats and Sysops emeriti

2,776

edits

@@ Line 155: / Line 155: @@
 * server ip compromise could allow push of signing cert from root cert to malicious server.
 * multiple refunds against non-valid transactions or just too many refunds.
-=== Conclusions / Action Items ===
-* Who :: What :: By when
-* Bill to verify with Justin about plan for receipt revocation
-* Need to design and implement a receipt reissue system
-* Review to verify daily keys are correctly destroyed each day
-* Need to alter receipt verification to cope with the proposed signing chain
-* need to define process for recovation/re-issue of root key
 == Action Items ==
 * Who :: What :: By when