RE: Straw poll for Algorithm Identifiers in Subject Public Key Info.

["Kemp, David P." <DPKemp@xxxxxxxxxxxxxx>]

Hmmm, I'd guess that applications would fail, either gracefully
or catastrophically, when faced with an unrecognized Subject
Public Key Info OID.   I did miss the point that they might
falsely accept and misuse the public key, but even after considering
the possibility it still seems highly improbable.

Dave

-----Original Message-----
From: Stefan Santesson [mailto:stefans@xxxxxxxxxxxxx] 
Sent: Tuesday, January 16, 2007 2:09 PM
To: Kemp, David P.; ietf-pkix@xxxxxxx
Subject: RE: Straw poll for Algorithm Identifiers in Subject Public Key
Info.

Thanks Dave,

Let me clarify where I think you missed my point.

I believe that it is less likely that a certificate with a critical
extension will be falsely accepted and misused by an application. I
believe the risk is greater that applications get it wrong and makes
wrong use of a public key if the restriction comes as a public key OID.

But this is just an educated guess.

I agree that it will be hard to define complete mapping info in an
extension. That was my point - It may make the extension overly complex.


Stefan Santesson
Senior Program Manager
Windows Security, Standards