[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: registration authorities




Hi all,

Although clarifications have been provided in 3739 regarding the profile is not restricted to QCs, it will be very difficult to explain to the end entities that a cert containing so-called "QC" extensions is not issued as a QC.

In my opinion, as the QC extensions can include specifical properties of the certs regarding the issuance as a QC, but can contain another ones that have no relationship with the QCs (i.e. RA, retention period, usable with an SSCD, ...), maybe the name for the extension can lead to misinterpretations and confusions.

Thank you very much for your attention,

Kind regards and happy new year,

Carlos

>>> Stephen Kent <kent@xxxxxxx> 30/12/04 20:36 >>>

At 6:45 PM +0100 12/30/04, Peter Sylvester wrote:
>  > >Doesn't 3739 say:
>>  >
>>  >    The profile is however not limited to Qualified
>>  >    Certificates and further profiling may facilitate specific local
>>  >    needs.
>>
>>  yes, but what i said was that syntactically, inclusion of the
>>  extension defined for QC's will generally be interpreted as
>>  indicating a QC. In the U.S. we have a saying:
>>     "If it looks like a duck and quacks like a duck, then it's
>>probably a duck."
>>
>No, it is a video game. :-)

yes, it probably is!

>
>
>       *  Some editorial clarifications have been made to introductory
>          sections to clarify that this profile is generally applicable
>          to a broad type of certificates, even if its prime purpose is
>          to facilitate issuance of Qualified Certificates.
>
>
>>  I think this saying will apply here, whether the cert was issued
>>  under QC guidelines or not.
>
>I tend to interprete the phrases as a warning to indicate exactly the
>contrary.

I agree that the text says one can use the extension more broadly,
and I agree that, therefore, IF one feels a need to name an RA in a
cert, this is the standard way we have defined to do that, but I
would still bet that folks who see an extension named qc-Statement
will infer that its a qualified cert ...

Steve




Advertencia legal:
Este mensaje y, en su caso, los ficheros anexos son confidenciales,
especialmente en lo que respecta a los datos personales, y se dirigen
exclusivamente al destinatario referenciado. Si usted no lo es y lo ha
recibido por error o tiene conocimiento del mismo por cualquier motivo, le
rogamos que nos lo comunique por este medio y proceda a destruirlo o borrarlo,
y que en todo caso se abstenga de utilizar, reproducir, alterar, archivar o
comunicar a terceros el presente mensaje y ficheros anexos, todo ello bajo pena
de incurrir en responsabilidades legales. El emisor no garantiza la integridad,
rapidez o seguridad del presente correo, ni se responsabiliza de posibles
perjuicios derivados de la captura, incorporaciones de virus o cualesquiera
otras manipulaciones efectuadas por terceros.


Advertiment legal:
Aquest missatge i, si escau, els fitxers annexos tenen caire confidencial,
especialment pel que fa a les dades personals, i s'adrecen exclusivament al
destinatari referenciat. Si no es tracta d'aquest i l'ha rebut per error o se li
ha fet arribar per qualsevol motiu, li preguem que ens ho comuniqui per aquesta
mateixa via i el destrueixi o l'esborri, i que en tot cas s'abstingui d'utilitzar,
reproduir, alterar, arxivar o comunicar a tercers aquest missatge i fitxers
annexos, tot sota pena d'entrar en responsabilitats legals. L'emissor no garanteix
la integritat, la rapidesa o la seguretat d'aquest correu, ni es responsabilitza
de possibles perjudicis derivats de la captura, incorporacions de virus o
qualssevol altres manipulacions que facin tercers.


Disclaimer:
This message and any attached files transmitted with it, is confidential,
especially as regards personal data. It is intended solely for the use of the
individual or entity to whom it is addressed. If you are not the intended recipient
and have received this information in error or have accessed it for any reason,
please notify us of this fact by email reply and then destroy or delete the message,
refraining from any reproduction, use, alteration, filing or communication to third
parties of this message and attached files on penalty of incurring legal
responsibilities. The sender does not guarantee the integrity, the accuracy, the
swift delivery or the security of this email transmission, and assumes no
responsibility for any possible damage incurred through data capture, virus
incorporation or any manipulation carried out by third parties.