Re: PKIX-2 http

["Anil R. Gangolli" <gangolli@xxxxxxxxxxxxxxxxxx>]

Peter Williams wrote:
> 
> We do need to agree the mime type for returning an http resource,
> still.
> 
> I note that the introduction also allows the http mechanism to be used
> for pushing the cert/CRL to the directory. Perhaps its best
> that the objects we are pulling/pushing are indeed simply
> regarded as files. When pulling a .crt file the object
> is labelled application/octet-string. When pushing files,
> the file objects are transferred in a classical http push operation's
> multipart mime type.
> 

Most HTTP clients that I know about use the mime type to
dispatch to type-specific handling code.  Using a generic
mime type like application/octet-string precludes this.

For certificates and CRLs browsers do and will likely continue
to use MIME types that indicate both the type and often
an application-specific usage.

Examples are:

application/x-x509-user-cert
application/x-x509-ca-cert


 
-- 
Anil R. Gangolli
Structured Arts Consulting Group
mailto:gangolli@StructuredArts.com
http://www.StructuredArts.com