RE: CA vs. EE cert processing

[Stephen Kent <kent@xxxxxxxxxxx>]

Alan,

I disagree. There is no obvious reason for this base standard to allow for
this ambiguity.   This is not a problem that is out of scope for the base
standard.  we agree, though, that adherence to the 2459 profile advoids
ambiguity.  The reason for this debate is that some folks felt the
ambiguity was the fault of 2459, whereas the analysis shows it to be
intrinsic in X.509.  Thus no fix to 2459 will remove the ambiguity.

steve