[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Attribute Cert Policies Rationale
Title: RE: Attribute Cert Policies
Rationale
At 9:46 AM -0500 12/27/02, Christopher S. Francis wrote:
Steve,
What Santosh said. Overloading the attribute
value OID with policy information seems like a messy solution to me
that will not scale well.
Furthermore, it is conceivable that applications may
want to take different actions when they don't understand the syntax
of a particular attribute vs. when they don't find the policy under
which it was issued acceptable. Using the attribute value OID to
convey policy information makes it impossible to make this
distinction.
Chris
Chris,
I agree that encoding both the attribute type and policy in the
OID is less elegant than having a separate, explicit policy extension
in an AC. But from my reading of the discussion, there has not
been strong support for adding an explicit policy facility to ACs, so
I was just suggesting an alternative that would meet your perceived
requirement in case the WG does not add the facility you want.
Steve