> When I some days ago launched the idea that AC's should (or could) be
> based on XML schemas there were hardly any sentiment for that.
> Some even cocluded that XML was not a PKIX-item!
> Now I see a lot of XML "promotion" in an other PKIX-area which is
> interesting but slightly puzzling.
> IMO ACs have at least the same "informational content" as OCSP-X and
> SCVP. Each AC "authorization profile", "receipt" or "ticket" ought
> to be just perfect to express as an XML schema. Wouldn't it?
It would. Indeed that is precisely the thing needed for a distributed authorization management solution being contemplated in some very large applications. If you did not get support for it previously that is regrettable. I certainly would support that wholeheartedly.
Khaja