[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: OCKID Question?


At 8:52 AM +1200 3/18/02, Sean P. Turner wrote: 
I'm just
curious why the only choices included are the EE, CA, AA, and bare key.

Because those were what I had thought of

There are other things that you trust in the PKIX realm like OCSP
responders.

Sounds good; I can add it.

  If the trouble was trying to profile it so that you'd know
it was and OCSP responder  you could look for id-kp-OCSPSigning OBJECT
IDENTIFIER ::= {id-kp 9} in extended key usage.  I'm sure there are
others but that's the one that popped to the top.

If there are others, please send them to me or the PKIX mailing list.

--Paul Hoffman, Director
--Internet Mail Consortium