I wrote:
>> If Microsoft has merely taken a DER-encoded object from another standard
>> and has incorporated it into a cert extension, that seems fine to me.
>> I hope they did it in such a way that existing BER/DER parsers of the
>> sMIMECapabilities attribute can just parse the extension body directly.

>> If you could supply a specification for this new extension, I'd file an
>> RFE for Thunderbird/NSS to handle these certs in the intended manner.

On 2009-07-02 02:20 PDT, Jean-Marc Desperrier wrote:
> I'm not very well placed to give a specification, but it seems it's 
> really nothing more than "take sMIMECapabilities, include it inside x509".
> 
> It would be good to include the RFE also in Dogtag then.

I have subsequently learned that this is specified in RFC 4262.
I have filed RFEs for NSS and for Dogtag.  I CC'ed you on the NSS RFE.

https://bugzilla.mozilla.org/show_bug.cgi?id=502139
https://bugzilla.redhat.com/show_bug.cgi?id=509481

Thank you for bringing this to my attention.

/Nelson
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to