[pkix] Certificate with Multiple Signers?

Jeffrey Walton <noloader@gmail.com> Sat, 04 April 2015 00:36 UTC

Return-Path: <noloader@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC07C1A888B for <pkix@ietfa.amsl.com>; Fri, 3 Apr 2015 17:36:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rRuqYggrXCS6 for <pkix@ietfa.amsl.com>; Fri, 3 Apr 2015 17:36:13 -0700 (PDT)
Received: from mail-ig0-x232.google.com (mail-ig0-x232.google.com [IPv6:2607:f8b0:4001:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95B071A889A for <pkix@ietf.org>; Fri, 3 Apr 2015 17:36:09 -0700 (PDT)
Received: by igcau2 with SMTP id au2so109544936igc.0 for <pkix@ietf.org>; Fri, 03 Apr 2015 17:36:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:reply-to:date:message-id:subject:from:to:content-type; bh=cTsucw/ODuQ+wLOsW9ZTpeebq3SLlX5fwcE19uauFyQ=; b=un9qHl33RF1jCFDywbZ5z3KY7VLb3bzOPS/hjCCUZco5J5w0cwVF8TUPtwrdIH92e2 C91pr51lyLzwHw7O2qKZX88bBjpIxEwRlnkCf6OYdg19JZUN7h+qJwfY4cxkUIUfG8CW wMpDCGF3N0mv1hVzd3gXMajPfA7YCenzHLJp7FgZIYQQXoe5RBUmC0fvl04gJ72WsMrD EuUm7lOkbyfhCkxyUuohNNlaH2CmTWHqSRnuniEEPPgP+m+oWAytQ5krN6vFYm7H2vbD wQRVhUBo3sTEeQtHa1LiyFVohRaHVTD5MQ1HlFTv1hBJIVfocV0KPlU4YLgTK0KPI9sN ToOw==
MIME-Version: 1.0
X-Received: by 10.42.236.132 with SMTP id kk4mr6990705icb.46.1428107769152; Fri, 03 Apr 2015 17:36:09 -0700 (PDT)
Received: by 10.36.77.15 with HTTP; Fri, 3 Apr 2015 17:36:09 -0700 (PDT)
Date: Fri, 03 Apr 2015 20:36:09 -0400
Message-ID: <CAH8yC8nCk0s-+NUWJAMxQUOJ37karU83q7K2Qsu_HL=FWBn5UQ@mail.gmail.com>
From: Jeffrey Walton <noloader@gmail.com>
To: PKIX <pkix@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/pkix/1zHPLmdaYxQypcEYMoYY-8R6C4U>
Subject: [pkix] Certificate with Multiple Signers?
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: noloader@gmail.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix/>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 04 Apr 2015 00:36:15 -0000

I'm trying to find some reading on PKIX certificates modulo multiple
signers. I'm getting lots of hits back, but they are for related
technologies, like CMS and RFC 4135.

Is there any IETF reading on the subject? Perhaps an old RFC or a discussion?

(I know why I want it. Now I'm trying to figure out why its a bad idea
(otherwise, we would likely have it)).