Re: Certificate profile for Biometrics information.

[Stephen Kent <kent@xxxxxxx>]

> I am looking for biometrics profile-definitions on how biometrics reference
> information may be encoded and embedded into X.509 certificates (Public Key
> Certificates as well as Attribute Certificates). The only
> "biometrics-data-extension" I have found so far is included in RFC 3039 as
> the "biometricInfo" extension.
>
> Are there other biometrics profiles that have been defined at this time?
>
> Regards Ebbe Hansen

Ebbe,

Many sorts of biometric info are inappropriate to place in a cert, 
due to concerns about disclosure of that info, e.g., to enable off 
line guessing attacks. This, in part, is why we don't have any 
extension defined for this purpose. Could you explain in more detail 
what sort of biometric info you envision storing in certs, and how it 
would be used?  That might help us better understand what might be 
appropriate.

Thanks,

Steve