Re: Signer certificate discovery for CRLs

[Denis Pinkas <Denis.Pinkas@xxxxxxxx>]

Russ,

> Denis:
>
> > I still wonder why you are making this restriction since LDAP is one 
> > of the only two methods that are supported in RFC 3280 to fetch 
> > certificates.
>
>
> This is simply not true.  When a GeneralName is used, the URI schemes 
> ftp, http, and ldap are explicitly discussed for fetching certificates.  
> When a GeneralName is rfc822name, email is discussed.  And, the 
> mailtoURI scheme is discussed for fetching CRLs.
>
> The Directory Access Protocol (DAP) is also discussed.

OK. DAP and LDAP.

Denis

> Russ