RE: Public key validation and Proof of possession

[Stephen Kent <kent@xxxxxxx>]

Title: RE: Public key validation and Proof of possession

At 2:18 PM -0700 10/27/05, Terry Hayes wrote:

> What's wrong with defining a new policy
> qualifier?
>  
> id-qt-ietf-pkix-key-validation-performed
> id-qt-ietf-pkix-proof-of-posession-performed
> (owner-posession-of-key-assured?)
>  
> These would generally be asserted only in
> the end-entity certificates.
>  
> Terry Hayes
>

3280 suggests that policy qualifiers NOT be used in general. If we adopted this approach we would have to revisit that advice.

   "To promote interoperability, this profile RECOMMENDS that policy
   information terms consist of only an OID.  Where an OID alone is

   insufficient, this profile strongly recommends that use of

   qualifiers be limited to those identified in this section."

Steve