[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Attribute Cert Policies Rationale
Title: RE: Attribute Cert Policies
Rationale
At 4:37 PM -0500 12/9/02, Roger Younglove wrote:
I agree that we need an AC Policies extension. An AA
could issue multiple types of ACs and just having the DN on the Cert
will not provide sufficient information to identify the type of AC. An
AC policy extension will allow identification.
We
seem to be overlooking another, perhaps simpler solution, namely to
assign different attribute OIDs to represent the same attributes
associated with different policies. In the example Chris
provided, the lab could issue green vs. red attributes, distinguished
by OID, rather than adding a policy extension to the AC.
Steve