Re: Storing Certificates in the DNS (draft-ietf-dnsext-rfc2538bis-08)

[Russ Housley <housley@xxxxxxxxxxxx>]

Tom:

Thanks for the review.  I do not think that this kind of guidance belongs 
in draft-ietf-dnsext-rfc2538bis, but it does belong in 3280bis.

Russ


At 06:38 PM 10/12/2005, Tom Gindin wrote:

>         Russ:
>
>         Are there any guidelines for CRL owner names, since they're
> covered in the draft although DNS distribution points aren't detailed in
> RFC 3280?  If there aren't any, IMHO a reasonable rule would be that if
> any sequence member of the distribution point name is a domain name (not a
> URI), that should be used.  Also (and lower in precedence), if any
> sequence member of the distribution point name is an RFC 822 address, its
> standard translation should be used.  I doubt if URI's will work without
> conflicts.
>         I don't know if these count as "concerns".
>
>                 Tom Gindin
> P.S.    The opinions above are mine, and not necessarily those of my
> employer.