On 27/12/2018 15:38, Jakob Bohm via dev-security-policy wrote: <snip> > For example, the relevant EKU is named "id-kp-serverAuth" not "id-kp- > browserWwwServerAuth" . WWW is mentioned only in a comment under the > OID definition.
Hi Jakob. Are you suggesting that comments in ASN.1 specifications are meaningless or that they do not convey intent? Also, are you suggesting that a canonical OID name must clearly convey the full and precise intent of the purpose(s) for which the OID should be used? -- Rob Stradling Senior Research & Development Scientist Sectigo Limited _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy