Re: [certid] Need to define "most specific RDN"
Peter Sylvester <peter.sylvester@edelweb.fr> Wed, 30 June 2010 16:23 UTC
Return-Path: <peter.sylvester@edelweb.fr>
X-Original-To: certid@core3.amsl.com
Delivered-To: certid@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix)
with ESMTP id AF7AD3A68F5 for <certid@core3.amsl.com>;
Wed, 30 Jun 2010 09:23:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.355
X-Spam-Level:
X-Spam-Status: No, score=-0.355 tagged_above=-999 required=5 tests=[AWL=-0.357,
BAYES_50=0.001, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com
[127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 71-uxDI9xiiP for
<certid@core3.amsl.com>; Wed, 30 Jun 2010 09:23:36 -0700 (PDT)
Received: from ganymede.on-x.com (ganymede.on-x.com [92.103.215.11]) by
core3.amsl.com (Postfix) with ESMTP id EDA183A6824 for <certid@ietf.org>;
Wed, 30 Jun 2010 09:23:35 -0700 (PDT)
Received: from varuna.puteaux.on-x (varuna.puteaux.on-x [192.168.10.6]) by
ganymede.on-x.com (Postfix) with ESMTP id AD0DAA5 for <certid@ietf.org>;
Wed, 30 Jun 2010 18:23:46 +0200 (CEST)
Received: from smtps.on-x.com (mintaka.puteaux.on-x [192.168.14.11]) by
varuna.puteaux.on-x (Postfix) with ESMTP id 8713517048 for <certid@ietf.org>;
Wed, 30 Jun 2010 18:23:46 +0200 (CEST)
Received: from [192.168.0.10] (gut75-3-82-227-163-182.fbx.proxad.net
[82.227.163.182]) by smtps.on-x.com (Postfix) with ESMTP id 6B9A2782B for
<certid@ietf.org>; Wed, 30 Jun 2010 18:23:46 +0200 (CEST)
Message-ID: <4C2B6F91.2030807@edelweb.fr>
Date: Wed, 30 Jun 2010 18:23:45 +0200
From: Peter Sylvester <peter.sylvester@edelweb.fr>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US;
rv:1.9.1.9) Gecko/20100423 Thunderbird/3.0.4
MIME-Version: 1.0
To: certid@ietf.org
References: <p062408bcc83880a30dd0@[10.20.30.158]> <4C2A6E8B.7060005@stpeter.im>
<7918CC38-B49D-4604-BAFE-622E0E1D14B9@Isode.com>
In-Reply-To: <7918CC38-B49D-4604-BAFE-622E0E1D14B9@Isode.com>
Content-Type: multipart/alternative;
boundary="------------010106020407040705000905"
Subject: Re: [certid] Need to define "most specific RDN"
X-BeenThere: certid@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Representation and verification of identity in certificates
<certid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/certid>,
<mailto:certid-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/certid>
List-Post: <mailto:certid@ietf.org>
List-Help: <mailto:certid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/certid>,
<mailto:certid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Jun 2010 16:23:44 -0000
>> 2. More substantially, we currently have this text: >> >> The subject field of a PKIX certificate is defined as an X.501 type >> Name and known as a Distinguished Name (DN) -- see [X.501] and >> [PKIX]. A DN is an ordered sequence of Relative Distinguished Names >> (RDNs), where each RDN is a set (i.e., an unordered group) of type- >> and-value pairs or "attribute value assertions" (AVAs) [LDAP-DN], >> each of which asserts some attribute about the subject of the >> certificate. In the DER encoding of a DN, the RDNs are always in >> order from most significant to least significant (i.e., the first RDN >> is most significant and the last RDN is least significant); however, >> in the string representation of a DN as used in various protocols and >> data formats, the RDNs might be ordered from most significant to >> least significant (e.g., this is true of LDAP) or from least >> significant to most significant. >> > > One could replace 'least/most significant' here with 'most/least specific'. > +1 significant is a bad term in this context IMO according to W&M: *1* *:* having meaning; /especially/ *:* suggestive <http://www.merriam-webster.com/dictionary/suggestive> <a significant glance> *2 a* *:* having or likely to have influence or effect *:* important <http://www.merriam-webster.com/dictionary/important> <a significant piece of legislation>; /also/ *:* of a noticeably or measurably large amount <a significant number of layoffs> <producing significant profits> *b* *:* probably caused by something other than mere chance <statistically significant correlation between vitamin deficiency and disease>
- [certid] Need to define "most specific RDN" Paul Hoffman
- Re: [certid] Need to define "most specific RDN" Peter Saint-Andre
- Re: [certid] Need to define "most specific RDN" Bruno Harbulot
- Re: [certid] Need to define "most specific RDN" Paul Hoffman
- Re: [certid] Need to define "most specific RDN" Peter Sylvester
- Re: [certid] Need to define "most specific RDN" Kaspar Brand
- Re: [certid] Need to define "most specific RDN" Kurt Zeilenga
- Re: [certid] Need to define "most specific RDN" Peter Sylvester
- Re: [certid] Need to define "most specific RDN" Peter Saint-Andre
- Re: [certid] Need to define "most specific RDN" Martin Rex
- Re: [certid] Need to define "most specific RDN" Peter Saint-Andre
- Re: [certid] Need to define "most specific RDN" Love Hörnquist Åstrand
- Re: [certid] Need to define "most specific RDN" Peter Saint-Andre
- Re: [certid] Need to define "most specific RDN" =JeffH
- Re: [certid] Need to define "most specific RDN" Kaspar Brand
- Re: [certid] Need to define "most specific RDN" Ludwig Nussel
- Re: [certid] Need to define "most specific RDN" Peter Sylvester
- Re: [certid] Need to define "most specific RDN" Kaspar Brand
- Re: [certid] Need to define "most specific RDN" Peter Saint-Andre
- Re: [certid] Need to define "most specific RDN" Kaspar Brand
- Re: [certid] Need to define "most specific RDN" Paul Hoffman
- Re: [certid] Need to define "most specific RDN" Kaspar Brand
- Re: [certid] Need to define "most specific RDN" Nelson B Bolyard
- Re: [certid] Need to define "most specific RDN" Kaspar Brand
- Re: [certid] Need to define "most specific RDN" Martin Rex
- Re: [certid] Need to define "most specific RDN" Nelson B Bolyard
- Re: [certid] Need to define "most specific RDN" Kaspar Brand
- Re: [certid] Need to define "most specific RDN" Ludwig Nussel
- Re: [certid] Need to define "most specific RDN" Nelson B Bolyard
- Re: [certid] Need to define "most specific RDN" Paul Tiemann
- Re: [certid] Need to define "most specific RDN" Martin Rex
- Re: [certid] Need to define "most specific RDN" Nelson B Bolyard
- Re: [certid] Need to define "most specific RDN" Kaspar Brand
- Re: [certid] Need to define "most specific RDN" Martin Rex
- Re: [certid] Need to define "most specific RDN" Martin Rex
- Re: [certid] Need to define "most specific RDN" Shumon Huque
- Re: [certid] Need to define "most specific RDN" Martin Rex
- Re: [certid] Need to define "most specific RDN" Shumon Huque
- Re: [certid] Need to define "most specific RDN" Peter Sylvester
- Re: [certid] Need to define "most specific RDN" Peter Saint-Andre
- Re: [certid] Need to define "most specific RDN" Peter Saint-Andre
- Re: [certid] Name constraints and legacy clients Matt McCutchen
- Re: [certid] Name constraints and legacy clients Matt McCutchen
- Re: [certid] Name constraints and legacy clients Paul Tiemann