RE: NEW Data type for certificate selection ?

[Anders Rundgren <anders.rundgren@xxxxxxxxxx>]

Ed,
>The first usual misconception here is when people confuse trust in a
>certificate to trust in a certificate's contents -- too quite
>different animals. In fact, the first is directly defined under X.509
>or PKIX but the second depends on the CPS, which depends on each CA,
>which systematically negate it.

Systematically negate it?

Sorry, I fail to understand why it is technically, legally, etc. impossible to create trusted
CA services that issues certificates with contents that can actually be used.  But as I said earlier,
Swedes are probably morons as we just do it anyway in spite of the fact that it does not work :-)

Anders