Re: Last Call: draft-ietf-pkix-rfc3280bis (Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile) to Proposed Standard

[Stephen Kent <kent@xxxxxxx>]

Sam Hartman identified an issue with one name type (URI) that may 
appear in the Subject/Issuer alternative names, when applying the 
Name Constrains extension to such names.  The issue arises when the 
URI does not contain an authority component (a host name in a DNS 
name or e-mail address), because the 3280bis description of how to 
apply name constraints to URIs assumes the presence of such a 
component.

The WG is working on text to address this issue in response to the 
last call comment .

Steve