[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: FW: New Liaison Statement, "Liaison to IETF on the removal of upper bound in X.509"




It seems like there are two questions here:

- Do we object to the ITU making the upper bound on DirectoryString optional

- Should we do anything to draft-ietf-pkix-rfc3280bis to reflect that

The answer to the first should be "no, we don't". Russ gave a list that shows the the ITU has a *long* way to go before it gets rid of the silly maximum lengths in X.509.

For me, the answer to the second question is "no" because of the large number of other silly limitations, most notably CommonName being 64 characters.

--Paul Hoffman, Director
--VPN Consortium