You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
"body": "* Rename `max_landmarks` to `max_active_landmarks` for clarity, since CAs also need to keep one 'inactive' landmark around in the landmark sequence, and that could lead to implementation confusion.\r\n* Fix example of setting max landmarks. The formula in the recommended procedure for allocating landmarks is `max_landmarks = ceil(max_cert_lifetime / time_between_landmarks) + 1`. The `+ 1` accounts for landmarks not allocated at the exact start of their time interval, which can push certificate expiry one interval further than `ceil(max_cert_lifetime / time_between_landmarks)` alone would bound.\r\n\r\n For example, say we have:\r\n\r\n time_between_landmarks: 1, giving time intervals [0,1), [1,2), [2,3)\r\n max_cert_lifetime: 3\r\n landmarks at times: 0.99, 1, 2, 3\r\n\r\n The landmark at time 0.99 could contain certs that don't expire until time 3.99. Thus, we need to keep all 4 landmarks active.",
0 commit comments