Re: Storing Certificates in the DNS (draft-ietf-dnsext-rfc2538bis-08)

[Tom Gindin <tgindin@xxxxxxxxxx>]

        Russ:

        Are there any guidelines for CRL owner names, since they're 
covered in the draft although DNS distribution points aren't detailed in 
RFC 3280?  If there aren't any, IMHO a reasonable rule would be that if 
any sequence member of the distribution point name is a domain name (not a 
URI), that should be used.  Also (and lower in precedence), if any 
sequence member of the distribution point name is an RFC 822 address, its 
standard translation should be used.  I doubt if URI's will work without 
conflicts.
        I don't know if these count as "concerns". 

                Tom Gindin
P.S.    The opinions above are mine, and not necessarily those of my 
employer.