[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Finding PKIX Servers!

To: <ietf-pkix@xxxxxxx>, "Bob Jueneman" <BJUENEMAN.PRV-7.PROVO@xxxxxxxxxx>, <Alan.Lloyd@xxxxxxxxxxxxxxxxxxxx>, <AndrewP@xxxxxxxxxxxx>, <pbaker@xxxxxxxxxxxx>
Subject: RE: Finding PKIX Servers!
From: "Tammy Carter" <TCARTER@xxxxxxxxxx>
Date: Fri, 05 Feb 1999 11:20:11 -0700
List-archive: <http://www.imc.org/ietf-pkix/mail-archive/>
List-unsubscribe: <mailto:ietf-pkix-request@imc.org?body=unsubscribe>
Sender: owner-ietf-pkix@xxxxxxx

I don't understand.  Several of the people on this list seem to believe that the way to find a CA is via some kind of advertisement.  However, what I don't understand is why?  Bob's suggestion of using the certificate to contain information about where to find the CA seems to work AND it is more similar to the mechanism that we already have for finding revocation information.  

Why do we want to come up with something different?  Is there something wrong with what we already have?  This debate must have been waged before, and must have been lost.  Has something changed in the world since then?

Tammy Green Carter
tcarter@novell.com

Prev by Date: RE: Attribute used to store cached certificate chains?
Next by Date: Authority Key Id.
Previous by thread: RE: Finding PKIX Servers!
Next by thread: RE: Finding PKIX Servers!
Index(es):
- Date
- Thread