[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CA vs. EE cert processing



Aram,

>My two cents: I agree with John. Given that RFC2459 is not a "standard" yet
>and thus no standard-compliant software exists out there, we should "fix"
>RFC2459 to do the right thing for existing legacy software, and the new
>RFC2459 compliant software.

The right thing is to avoid the ambiguity introduced by X.509; changing
2459 cannot fix that.  2459 is not broken, so please don't use the term
"fix" when referring to it.

Steve