mobike-1----Page:24
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20  21  22  23  24  25  26  27  28  29  30  31  32  33  34  35  36  37 

Issue # 18 -- Do any tests at all?
Alternatives:
Never
Mandatory
Configuration and/or situation
Proposal -- party that is being tested
MUST always respond
Proposal -- party that is doing the test
IF new address is in certificate, no test needed
OTHERWISE do it if configuration tells you to. Default is on. (Could also be done if attack is suspected, but hard to define this)
PPT Version