Peter Gutmann wrote:
If you follow the spec in this regard you get 100% unreliability, not reliability - your PKI application when shipped will break repeatedly whenever it encounters a non-DER certificate, while everything else will work just fine. So "X.509 dogma" is for X.509 dogmatists and pretty much no-one else.
Postel's Law, anyone? :) -- Tim
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature