
|
Issue # 18 -- Do any tests at all? Alternatives: Never Mandatory Configuration and/or situation Proposal -- party that is being tested MUST always respond Proposal -- party that is doing the test IF new address is in certificate, no test needed OTHERWISE do it if configuration tells you to. Default is on. (Could also be done if attack is suspected, but hard to define this) |