[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [pkix] way forward for 5280



Hi,

I did some testing on windows 7 and unfortunately I can report that it
still does not show UTF-8 encoded user notice policy qualifiers.
BMP-string displays fine. Firefox handles UTF-8 just fine.

My guess it that many CAs create stuff that MS understands...and I'm not
saying that we should alter the RFC for MS, but that MS should fix their
implementation.

Cheers,
Tomas

Tomas Gustavsson wrote:

I mean MS client software, when displaying certificates in Windows XP for example it will only display the user notice if it is a BMPString. With this in mind I also assume that MS CA issues user notices with BMPString although I haven't verified.

Haven't tested on Vista or Win 7 though (I'm a linux fanboy :-)), wich was the reason for the question. I can make a test of this myself though.

Cheers,
Tomas

Stephen Kent wrote:
At 8:58 AM +0100 11/17/09, Tomas Gustavsson wrote:
Hi, does this mean that Microsoft can now handle UTF-8 in user notices? It used to be that we had to violate rfc because MS requires BMPString.

Cheers,
Tomas

I don't know what any specific MS PKI technology supports. But if it supports only BMPString, its compliance status is unchanged :-).

I don't recall David's report finding any certs that used BMPString. When you say "MS requires BMPString" do you mean the MS CA implementation, one or more MS applications, or what?

Steve

_______________________________________________
pkix mailing list
pkix at ietf.org
https://www.ietf.org/mailman/listinfo/pkix


Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.