Re: About RFC 3280bis

[Peter Sylvester <Peter.Sylvester@xxxxxxxxxx>]

> 
> This change was not made to accommodate "partial" path validation, so 
> there is no need to change section 6.1.6.  The change was only intended 
> to acknowledge that the final certificate in the certification path may 
> be a CA certificate, although it is being validated for some use other 
> than certificate signing (e.g., CRL signing, OCSP response signing, 
> signing of CMP/CMC transaction messages).

I see.

> In the -01 draft, I will add a note to section 6.1 stating that 
> certificate n is referred to as the "end certificate" (or "target 
> certificate" if WG consensus is that that term should be used instead).

Target seems sufficiently neutral.

What about adding your explanation above or something like:

"The path algorithm can be applied for all certificates which are
 used for purposes other than certificate signing. Such certificates
 can be end entity certificates, or CA certificates when they are used
 for other purposes than certificate signing."