Re: [core] #255: Authority Name issues with SNI and X.509 certificate

[Carsten Bormann <[e-mail]>]

On Dec 7, 2012, at 12:11, Zach Shelby <[e-mail]> wrote:

> We will still need do more editorial work on that section. 

Indeed.  I wonder whether we should be doing what I wrote in the commit comment:
Extract the cert-based section and develop it on a separate axis.  
It will be more unstable than the base document until we have found all the right places to connect to and caused any necessary updates.

To Thomas' question: If you need to fit it into DNS, one way to put an EUI-64 into a DNS context is to do, say, a base32 encode of the identifier and use it as a DNS label.
In a DNS-based system, it's up to the provisioning mechanisms to come up with these names, so there may not even be a need to standardize such a mapping.
For more general applications, draft-farrell-decade-ni is a good source of (URI-based) names (too bad that it will be stuck in the RFC editor queue for another year or so).

It is the lack of clarity about the range of provisioning mechanisms that cause us most of the trouble here.
Reminds me that I still have a SOLACE draft to write...

Grüße, Carsten