RE: I-D ACTION:draft-ietf-pkix-time-stamp-08.txt. HASH

[Stephen Kent <kent@xxxxxxx>]

Jim,

I support Denis in his desire to have the TSA check everything it can 
(syntactically) in a request.  Not checking allows the TSA to sign 
tokens that are just broken.  We have seen many examples of broken 
certs signed by CAs, so I think it worthwhile that we put language in 
RFCs to require, where possible, that appropriate consistency checks 
be performed.  RFC 2459 has a few statement about relationships among 
extensions, which gets to the same concerns.  We could put in more, 
or collect them in one place, and make for a better document.

I may have lost track of the counter argument here.  Why would one 
not want to have a TSA do the best possible job when it comes to 
ensuring syntactic consistency re its inputs?

Steve