Per-Entity Metadata Working Group

[Tom Scavo <>]

The key word on the subject line is "deploy." Personally, I'm not
convinced that the benefits of TLS outweigh the costs (especially if
we tighten validUntil) but in order to advance the discussion, let me
ask the relevant deployment questions:

1) What CA signs the TLS server certificate?
2) What is the expiration date on the TLS certificate?
3) How do we handle revocation?

I'll give one possible deployment scenario:

1) The metadata signing key also signs the TLS server certificate.
2) TLS certificates are short-lived, on the order of days.
3) Revocation is not necessary (since TLS certificates are short-lived).

The above deployment has teeth but I'm afraid it is nontrivial to
implement. Are there other deployment scenarios that are easier to
implement yet meet our needs?

Tom