> -----Original Message-----
> From: [email protected] [mailto:[email protected]] On
> Behalf Of Jim Schaad
> Sent: Thursday, September 30, 2010 3:57 PM
> To: 'Peter Saint-Andre'
> Cc: [email protected]
> Subject: Re: [certid] CN-ID and name constraints
> 
> I would consider this to be an application specific behavior and not
> part of the general validity processing that would be part of 5280.
If
> it was to happen anyplace I think this is where it should be
> recommended.

As a means of enabling this type of processing, RFC 5280 could be
amended to output name constraints state similar to the way policy state
is output now.
_______________________________________________
certid mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/certid

Reply via email to