Re: Who can be a Time Stamping Authority?

[Peter Sylvester <Peter.Sylvester@xxxxxxxxxx>]

> 
> In the second case, the TSA certificate should contain an extension, which
> would indicate that this TSA may issue time stamping tokens within that CA
> realm.  Since RFC2459 is currently being revised and as suggested by Michael
What does mean 'issue time stamping tokens withing that CA realm'?

> Zolotarev, the Authority Information Access extension does not seem
> appropriate for this particular purpose, I would suggest that a new private
> Internet extension should probably be added in RFC2459 to achieve this
> requirement.
>
It seems to me that what is required is a kind of 'Subject Information Access'
extension as it was available in earlier drafts. The definition is similar
to the AIA by replacing 'issuer' by 'subject'.
 

Another possibility is to change in 2459:

   The authority information access extension indicates how to access CA
   information and services for the issuer of the certificate in which
   the extension appears. 

to

   The aia extension indicates how to access services related to the certificate
   in which the extension appears. 

The definition of accessMethod must describe anyway how the extension has to be
interpreted.