Re: [regrep] [RS Issue] HTTP connection taking longer than TTL

[Diego Ballve <diego.ballve@digital-artefacts.fi>]

 > Matthew MacKenzie wrote:
 >
 >> Farrukh Najmi wrote:
 >>
 >> Good point.
 >>
 >> SSL based communication between Registry Client and Registry is
 >> already specified in section 10.3.1. I assume most
 >> registry-to-registry communication *WILL* be over SSL. Does that
 >> address the issue?
 >
 > Technically, yes, but I think we should mention that if
 > registry-to-registry communication is via mutually authenticated SSL,
 > requests and responses should not be signed.

Also, something like this should be added to authentication section:

"Authentication is (optionally) done through ssl client auth, and if 
certificate does not match or is not present, server treats it as 
Registry Guest".

Diego

-- 
Diego Ballve
Digital Artefacts Europe
http://www.digital-artefacts.fi