[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: OCSP and Cross-certification

To: Mack.Hicks@xxxxxxxxxxxxxxx, tim.moses@xxxxxxxxxxx
Subject: Re: OCSP and Cross-certification
From: Mike Smith <mfsmith@xxxxxxxxxxxxx>
Date: Tue, 09 Dec 1997 12:49:54 -0700
Cc: ietf-pkix@xxxxxxxxxxxxxxxx

Mack:

You are probably aware of the following point, but thought I'd mention it anyway;  Some cross-certification of CA schemes bring in not just the tree of the CA cross-certified, but all of the Ca trees they have cross-certififed and all of the CA's those have cross-certified, ... etc.  Could be one CA cross cert could bring in all CA trees.

Scary from a Bank's point of view, eh?

Michael

>>> Mack Hicks <Mack.Hicks@BankAmerica.com> 12/09/97 10:58AM >>>

Tim,

Follow-Ups:
- Re: [IETF-PKIX] OCSP and Cross-certification
  - From: Russ Housley

Prev by Date: Re: [IETF-PKIX] OCSP v CRLs over HTTP
Next by Date: PKIX/ECDSA - Duplicate OIDs
Previous by thread: Re: OCSP and Cross-certification
Next by thread: Re: [IETF-PKIX] OCSP and Cross-certification
Index(es):
- Date
- Thread