Re: Q: Where should do I put a max amount in a X.509v3 certificate?

[Michael Ströder <michael@xxxxxxxxxxxx>]

Tom Gindin wrote:
>       Since this "purchase limit" is intended as a constraint on signed
> orders, and those are signed by PKC's rather than AC's, the constraint
> needs to go into the PKC.  I also don't think the syntax is very complex

I'd suggest to thoroughly discuss a business model first before thinking 
about technical aspects (not on PKIX list off course). From some discussion 
I remember that most drafts for something like this just didn't fit into how 
financial institutions are working (although the institutions were committed 
to use this particular PKI ;-).

So defining technical specifications was completely useless because there 
was no working business model behind it.

Ciao, Michael.