Re: OCKID - question about the format

[Michael Ströder <michael@xxxxxxxxxxxx>]

Vesa Suontama wrote:
>
> Just one comment about OCKID draft. I think the idea is good: There
> should be a standard way to represent the hash of the PKI objects.

I concur.

> However, I do not like the idea of using the base32 conversion in
> converting the binary to ASCII. Numerous programs already out there just
> use the hex presentation of the SHA-1 hash. See for example, MS
> certificate viewer in Windows, Netscape, SSH Sentinel, etc.
>
> I suggest that the OCKID would also use the plain HEX representation of
> the SHA-1 hash. This would make the ID's provided by the programs
> already out there compatible with OCKID.

I strongly agree. I would additionally like to provide the MD5 hash of the 
certificates (like Netscape does). Maybe with a prefix describing the hash 
algorithm.

SHA1-CC48-7D7A A622-8613-E997

Ciao, Michael.