Re: Attribute Cert Policies Rationale

["Chris @ work" <chris.francis@xxxxxxxxxxxxxxxx>]

Title: RE: Attribute Cert Policies Rationale

Steve,

 

I considered that approach initially, but rejected it becuase it inhibits interoperability.  If issuers have to define a unique OID for an attribute type to reflect their particular policy, then this makes it difficult for AC processing software to be developed to support a common set of attribute types (such as those defined in RFC-3281 for instance).

 

Chris

----- Original Message -----

From: Stephen Kent

To: Roger Younglove

Cc: 'Christopher S. Francis' ; Ietf-Pkix

Sent: Friday, December 20, 2002 11:57 AM

Subject: RE: Attribute Cert Policies Rationale

 

  We seem to be overlooking another, perhaps simpler solution, namely to assign different attribute OIDs to represent the same attributes associated with different policies.  In the example Chris provided, the lab could issue green vs. red attributes, distinguished by OID, rather than adding a policy extension to the AC.

Steve