[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: I-D ACTION:draft-ietf-pkix-certstore-http-01.txt


Peter Gutmann wrote:

"Housley, Russ" <rhousley@xxxxxxxxxxxxxxx> writes:

This is acceptable, but I prefer one that is more straightforward to implement
with web server tools.


That's probably the best argument for choosing MIME multipart/RFC 2585 rather
than a SEQUENCE OF, the server shouldn't need to do anything more specialised
than "fetch value based on key, via HTTP".  Any special-case processing can be
done by the client.


I don't agree. Complexity should be put in the server, not the client. Reason being that there are typically more client than server implementations and that clients may have to operate with limited resources.

I do agree that a non-standard SEQUENCE OF is suboptimal, but that argument does not apply for a CMS certs only message.

[Did I mention that I do not feel like implementing multipart MIME messages this year? ;-) ]

Andreas.