Santosh Chokhani wrote:
Stefan is saying that the data is not applicant chosen.
The subject org logotype in 3709 is applicant chosen and has the same problem.
I think the countermeasure of re-ordering extensions is sufficient, and is probably worth a security consideration in both specs.
-- Tim
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature