IETF Logo Mail Archive

Re: [certid] Domain Components

Michael Ströder <michael@stroeder.com> Sat, 19 June 2010 14:42 UTC

Return-Path: <michael@stroeder.com>
X-Original-To: certid@core3.amsl.com
Delivered-To: certid@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3907F3A6A16 for <certid@core3.amsl.com>; Sat, 19 Jun 2010 07:42:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.163
X-Spam-Level:
X-Spam-Status: No, score=-0.163 tagged_above=-999 required=5 tests=[AWL=-0.278, BAYES_40=-0.185, MIME_8BIT_HEADER=0.3]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dq2NLEqMCwNT for <certid@core3.amsl.com>; Sat, 19 Jun 2010 07:42:07 -0700 (PDT)
Received: from srv1.stroeder.com (srv1.stroeder.com [213.240.180.113]) by core3.amsl.com (Postfix) with ESMTP id 451003A6875 for <certid@ietf.org>; Sat, 19 Jun 2010 07:42:07 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by srv1.stroeder.com (Postfix) with ESMTP id 544F54E087; Sat, 19 Jun 2010 16:42:08 +0200 (CEST)
X-Virus-Scanned: amavisd-new at stroeder.com
Received: from srv1.stroeder.com ([127.0.0.1]) by localhost (srv1.stroeder.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R-xKmJ3MNV31; Sat, 19 Jun 2010 16:42:06 +0200 (CEST)
Received: from [10.1.0.2] (unknown [10.1.0.2]) by srv1.stroeder.com (Postfix) with ESMTP id 9AB2E4E04C; Sat, 19 Jun 2010 16:42:04 +0200 (CEST)
Message-ID: <4C1CD73B.6000602@stroeder.com>
Date: Sat, 19 Jun 2010 16:42:03 +0200
From: =?ISO-8859-1?Q?Michael_Str=F6der?= <michael@stroeder.com>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.10) Gecko/20100504 Lightning/1.0b1 SeaMonkey/2.0.5
MIME-Version: 1.0
To: Alexey Melnikov <alexey.melnikov@isode.com>
References: <4C12A27D.3070308@stpeter.im> <p0624086ac8386db66483@[10.20.30.158]> <4C1CA2B8.9080103@isode.com> <p0624082ac8427d3d733f@[10.20.30.158]> <4C1CD30B.4090200@isode.com>
In-Reply-To: <4C1CD30B.4090200@isode.com>
X-Enigmail-Version: 1.0.1
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: Paul Hoffman <phoffman@imc.org>, IETF cert-based identity <certid@ietf.org>
Subject: Re: [certid] Domain Components
X-BeenThere: certid@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Representation and verification of identity in certificates <certid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/certid>, <mailto:certid-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/certid>
List-Post: <mailto:certid@ietf.org>
List-Help: <mailto:certid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/certid>, <mailto:certid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 19 Jun 2010 14:42:08 -0000

Alexey Melnikov wrote:
> Paul Hoffman wrote:
>> No, I'm saying that the order in which you are supposed to take the
>> DCs has historically been unclear. "Most significant" means different
>> things to different people.
>>
> I probably sound like a broken record, but the order is very clear for
> LDAP. I don't see why is this going to be different for X.509 certificates.

Yes, I concur RFC 2247 is pretty clear and is meant to be applied to X.500
names as well.

Ciao, Michael.

v2.8.7 | Report a Bug | By Email