adjusting assertion validity times

[Christopher Bongaarts]

On 9/11/2012 12:25 PM, Cantor, Scott wrote:
>> Is it reasonable to expect the SP to allow for clock skew on the
>> notBefore, or should we be hacking things to work around it?
>
> It is reasonable to require that.
>
> An errata was issued to provide ammunition because a particular
> implementer decided that common sense had to be spelled out before they
> would consider engaging in it.

Aha, that is the tip I needed.  I did scour the standards, but I didn't 
check the errata.  That should give me the backing needed to say "fix 
yer stuff".

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%