Re: Global PKI on DNS?

[Franck Martin]

Here is a sample certificate... which is less than 2kB long... DNS protocol uses mainly udp, which I think can handle this size... You can know what it means by using the command (I think): openssl x509 -in thiscert.cert -text -----BEGIN CERTIFICATE----- MIIFKzCCBJSgAwIBAgIBADANBgkqhkiG9w0BAQUFADCBiTELMAkGA1UEBhMCRkox DTALBgNVBAgTBEZpamkxDTALBgNVBAcTBFN1dmExDjAMBgNVBAoTBVNPUEFDMQww CgYDVQQLEwNJVFUxFjAUBgNVBAMTDVNPUEFDIFJvb3QgQ0ExJjAkBgkqhkiG9w0B CQEWF2FkbWluaXN0cmF0b3JAc29wYWMub3JnMB4XDTAyMDUwOTA0NTEwOVoXDTEy MDUwNjA0NTEwOVowgYkxCzAJBgNVBAYTAkZKMQ0wCwYDVQQIEwRGaWppMQ0wCwYD VQQHEwRTdXZhMQ4wDAYDVQQKEwVTT1BBQzEMMAoGA1UECxMDSVRVMRYwFAYDVQQD Ew1TT1BBQyBSb290IENBMSYwJAYJKoZIhvcNAQkBFhdhZG1pbmlzdHJhdG9yQHNv cGFjLm9yZzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAn8bzb1y2+hd/aofT 9Mc0qB2BMeOo6gnwzoHiMO7+3mS/cRAVfPrlvxsC3cOda0vb2BKCZnY6Dh/knUaO aoVGXMfwEkUYCtaLoyYu4uZK+XeW0zbXWObrrDFT548Ha/iWV52iCItGQiUCVnPO kut2bpKVY+jGtlQTiO5Iq5xIr90CAwEAAaOCAp8wggKbMB0GA1UdDgQWBBQ6oBOW 0mqGuX8tVL5QO9PxpOxRrzCBtgYDVR0jBIGuMIGrgBQ6oBOW0mqGuX8tVL5QO9Px pOxRr6GBj6SBjDCBiTELMAkGA1UEBhMCRkoxDTALBgNVBAgTBEZpamkxDTALBgNV BAcTBFN1dmExDjAMBgNVBAoTBVNPUEFDMQwwCgYDVQQLEwNJVFUxFjAUBgNVBAMT DVNPUEFDIFJvb3QgQ0ExJjAkBgkqhkiG9w0BCQEWF2FkbWluaXN0cmF0b3JAc29w YWMub3JnggEAMAwGA1UdEwQFMAMBAf8wPwYJYIZIAYb4QgENBDIWMENlcnRpZmlj YXRlIGlzc3VlZCBieSBodHRwczovL3d3dy5zb3BhYy5vcmcvc3NsLzApBglghkgB hvhCAQIEHBYaaHR0cHM6Ly93d3cuc29wYWMub3JnL3NzbC8wNQYJYIZIAYb4QgEE BCgWJmh0dHBzOi8vd3d3LnNvcGFjLm9yZy9zc2wvc29wYWMtY2EuY3JsMDkGCWCG SAGG+EIBAwQsFipodHRwczovL3d3dy5zb3BhYy5vcmcvc3NsL3Jldm9jYXRpb24u aHRtbD8wNgYJYIZIAYb4QgEHBCkWJ2h0dHBzOi8vd3d3LnNvcGFjLm9yZy9zc2wv cmVuZXdhbC5odG1sPzA0BglghkgBhvhCAQgEJxYlaHR0cHM6Ly93d3cuc29wYWMu b3JnL3NzbC9wb2xpY3kuaHRtbDAuBgNVHRIEJzAlhiNodHRwczovL3d3dy5zb3Bh Yy5vcmcvc3NsL3NvcGFjLmNydDA3BgNVHR8EMDAuMCygKqAohiZodHRwczovL3d3 dy5zb3BhYy5vcmcvc3NsL3NvcGFjLWNhLmNybDANBgkqhkiG9w0BAQUFAAOBgQBW BH1Ukvc8BHqWODw9VLIYgn637K+G1TqrpwS442zUQguGEtp7heZqONV5e53239T6 M2bghmLdepbKZ4tXWiP97FTstyeiDkJ4D1CKukf7GXMd3YHIxbVG9tKaGCxu/ydD tjbUWjF3HeWQB+JXbJrvlFQUUBMeN913PlHaiyPvIA== -----END CERTIFICATE----- On Sat, 2002-06-08 at 20:16, James Pullicino wrote: What is the average size of a PKI certificate?   Regards,   James Pullicino