Re: Global PKI on DNS?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Global PKI on DNS?



On Mon, 10 Jun 2002 18:04:45 -0000, Franck Martin <franck at sopac.org>  said:

> For instance:
> In the certificate C= coult be root or the ccTLD or gTLD then O= could
> be the rest of the domain name

Note that (a)  there's no C= field in 'foobar.com', and (b) you're not allowing
for l= location fields as they may or may not map into 'location.state.US'.

Read RFC2163 for a discussion of mapping X.400 to RFC822, which is a very
similar problem....  It's NOT as easy as you think...
-- 
				Valdis Kletnieks
				Computer Systems Senior Engineer
				Virginia Tech


Attachment: pgp8eXJvgahu4.pgp
Description: PGP signature


Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.