search

KantaraInitiative / SAMLprofiles

SAML interoperability and deployment profiles
Other
11 stars 4 forks source link

(Response to Feedback Item 15) Clarify language around clock skew #76

Closed judielaine closed 6 years ago

judielaine commented 6 years ago

Change the wording to: “the clock skew MUST be between 3 min and 5 min.” (Emphasis just to highlight the change to make, not to be part of the change.)

judielaine commented 6 years ago

From 2018-05-24 meeting: Clock skew is the allowable over/under, relative to the deployer’s own clock. Allowing less than 3 minutes delta is not acceptable (so sayeth kerberos), but if we had to we could go as low as 1 minute.