At Thu, 10 Jun 2010 10:25:55 +0200, Roque Gagliano wrote: > > Particularly in SEND (RFC 3971 Section 6.5) that also deals with > RFC3779 extensions, the RP configuration is done with a similar > mechanism. The only difference is that it adds the key algorithm > too....which could be also good for this document.
The Base64-encoded key portion described in the second sentence of section 2 of Sam's draft is an X.509 SubjectPublicKeyInfo, which includes a key algorithm identifier. See RFC 5280. I don't think we'd gain anything from adding a second key algorithm identifier, and would prefer not to add an unnecessary error condition (if we were to duplicate the key algorithm identifier, we'd have to check that the two copies identify the same algorithm, and handle the failure case -- none of which makes any progress towards our real goal). _______________________________________________ sidr mailing list [email protected] https://www.ietf.org/mailman/listinfo/sidr
