Re: Signer certificate discovery for CRLs

[Russ Housley <housley@xxxxxxxxxxxx>]

Denis:

> I still wonder why you are making this restriction since LDAP is one of 
> the only two methods that are supported in RFC 3280 to fetch certificates.

This is simply not true.  When a GeneralName is used, the URI schemes ftp, 
http, and ldap are explicitly discussed for fetching certificates.  When a 
GeneralName is rfc822name, email is discussed.  And, the mailtoURI scheme 
is discussed for fetching CRLs.

The Directory Access Protocol (DAP) is also discussed.

Russ