What we do in bigtent and moz Idp is ignore suggested cert duration and always issue 5 minute certs.

-- lloyd (thumb-typing)

On May 29, 2013, at 5:23 PM, Sean McArthur <notifications@github.com> wrote:

> In server.js:
> 
> >    res.clearCookie('certify');
> > -  res.render('provision', { certify: email });
> > +  if (!isCorrectEmail) {
> > +    return res.send(401, "Email isn't verified.");
> > +  }
> > +  keys(function(pubKey, privKey) {
> > +    cert.sign({
> > +      privkey: privKey,
> > +      hostname: config.get('issuer'),
> > +      duration: req.body.duration,
> sure. should we make a max? and it be a config value?
> 
> —
> Reply to this email directly or view it on GitHub.