[IETF-PKIX] PKIX Part 1: using the same algorithm identifiers

[Paul Hoffman / IMC <phoffman@xxxxxxx>]

At the end of section 4.1.1.2, it says that the signatureAlgorithm "should
contain the same algorithm identifier as the signature field". This has
been explained to me offline as the fact that they really are talking about
the same thing. Thus, the word "should" is wrong and makes it seem like
there is an acceptable case where the identifiers might differ. I believe
this must be changed to read "must contain...".


--Paul Hoffman, Director
--Internet Mail Consortium