[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Dedicated CRL signing keys

To: Russ Housley <rhousley@xxxxxxxxxxxxxxx>
Subject: Re: Dedicated CRL signing keys
From: Juergen Brauckmann <brauckmann@xxxxxxxxxxxxxx>
Date: Thu, 19 Apr 2001 08:52:34 +0200
Cc: ietf-pkix@xxxxxxx
References: <>

Russ Housley wrote:
> I propose the following solution that builds on the Indirect CRL
> capabilities that are already available.  When a CA wants to employ
> separate private keys to sign certificates and CRLs, then that CA MUST
> delegate CRL signing to a separate authority.  That separate authority MUST
> have a different Distinguished Name that the CA, 

Why must it have a different DN?

Regards,
   Juergen

References:
- Re: Dedicated CRL signing keys
  - From: Russ Housley

Prev by Date: RE: Last Call: draft-ietf-pkix-new-part1-06.txt comments
Next by Date: RE: Last Call: draft-ietf-pkix-new-part1-06.txt comments
Previous by thread: Re: Dedicated CRL signing keys
Next by thread: Re: Dedicated CRL signing keys
Index(es):
- Date
- Thread