Re: carrying certificates

Housley, Russ (housley@spyrus.com)
Tue, 05 Mar 96 14:21:34

Derek:

>> Where is the certificate  associated with the signature carried?  I would 
>> like the originator to be able to include her certificate in the signed 
>> multipart.
>
> It is out of band.  If you need to get the key of the signatory, you
> look it up in a directory or ask the sender for it.  PGP does not
> have in-band key certificates.  This is considered a feature.

I think it would be better if there were a location to optionally carry a 
certificate.  I can see that bandwidth is reduced if you know that the 
recipient can easily obtain the certificate from a directory or cache.  
However, there are many environments where directory access is unavailable.

Russ