Re: Attribute Cert Policies Rationale

[Stephen Farrell <stephen.farrell@xxxxxxxxxxxx>]

Russ Housley wrote:
> 
> Denis:
> 
> >>Unlike Steve Farrell, I have no major objection to the inclusion of a
> >>policy OID.
> >
> >Good.

Funnily enough, I do (still) have an objection: Its unnecessary additional
crud and the same effect can be achieved now with no new specification and
no new code. I already showed one way, here's another: put your policy
garbage in the issuer's PKC which is fine with both 3280 and 3281 unless 
you're under the mistaken impression that PKCs are somehow expensive.

Stephen.



-- 
____________________________________________________________
Stephen Farrell         				   
Baltimore Technologies,   tel: (direct line) +353 1 881 6716
39 Parkgate Street,                     fax: +353 1 881 7000
Dublin 8.                mailto:stephen.farrell@xxxxxxxxxxxx
Ireland                             http://www.baltimore.com