Re: POP profile in CRMF /Was Re: generation of private keys

[ghilborn@xxxxxxx]

Before a relying party user or organization enables an application to make
real-time decisions to trust a given CA's certificates all of the CA's
policies and practices should be considered, including the CA's method of
POP, if any.  Since the profile already includes the policy extension, and
a conforming application must be able to recognize the policy OID, is there
anything gained by a redundant extension for POP or any other particular
policy attribute?