draft-ietf-pkix-rfc3770bis-01: Section 2

Russ Housley <housley@vigilsec.com> Thu, 14 April 2005 16:28 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA29039 for <pkix-archive@lists.ietf.org>; Thu, 14 Apr 2005 12:28:31 -0400 (EDT)
Received: from above.proper.com (localhost.vpnc.org [127.0.0.1]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j3EFh1q4035360; Thu, 14 Apr 2005 08:43:01 -0700 (PDT) (envelope-from owner-ietf-pkix@mail.imc.org)
Received: (from majordom@localhost) by above.proper.com (8.12.11/8.12.9/Submit) id j3EFh1JJ035359; Thu, 14 Apr 2005 08:43:01 -0700 (PDT)
X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-pkix@mail.imc.org using -f
Received: from woodstock.binhost.com (woodstock.binhost.com [144.202.243.4]) by above.proper.com (8.12.11/8.12.9) with SMTP id j3EFh0x0035353 for <ietf-pkix@imc.org>; Thu, 14 Apr 2005 08:43:00 -0700 (PDT) (envelope-from housley@vigilsec.com)
Received: (qmail 4038 invoked by uid 0); 14 Apr 2005 14:47:54 -0000
Received: from unknown (HELO Russ-Laptop.vigilsec.com) (141.156.165.114) by woodstock.binhost.com with SMTP; 14 Apr 2005 14:47:54 -0000
Message-Id: <6.2.0.14.2.20050414104520.05029b50@mail.binhost.com>
X-Mailer: QUALCOMM Windows Eudora Version 6.2.0.14
Date: Thu, 14 Apr 2005 10:47:49 -0400
To: Peter Sylvester <Peter.Sylvester@edelweb.fr>
From: Russ Housley <housley@vigilsec.com>
Subject: draft-ietf-pkix-rfc3770bis-01: Section 2
Cc: ietf-pkix@imc.org
In-Reply-To: <200504140849.j3E8nim01640@chandon.edelweb.fr>
References: <200504140849.j3E8nim01640@chandon.edelweb.fr>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Sender: owner-ietf-pkix@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-pkix/mail-archive/>
List-ID: <ietf-pkix.imc.org>
List-Unsubscribe: <mailto:ietf-pkix-request@imc.org?body=unsubscribe>

Note:  I am starting a separate thread for each of the unresolved 
issues.  I hope this draws more people into the discussion.

Peter:

> > >This restriction is new, and I don't see why this is necessary.
> > >I am not sure, but I don't know of any other purpose that has
> > >a restriction like this, and current scvp specs don't allow to
> > >check for this (you cannot specify MUST NOT).
> >
> > The IETF (or anyone else for that matter) should not specify EAP methods
> > that expect either of these key usage bits to be set.
> >
> > You are primarily asking for sentence to be deleted. The sentences that 
> you
> > would like to see go away are in RFC 3770, so I think that the removal
> > needs to be justified.
>
>The initial text was an inconsistent adoption from something of 2459 and 3280.
>This demonstrates the problematics of copying text portions "for convenience."
>Correcting the text as is still does not give a complete picture since it
>is only a subset of rfc 3280. This kind of 'layman guide to 3280' doesn't
>seem appropriate to me here.
>
>Also, 3280 is under revision, if it happens that the corresponding text
>gets clarified in some way, one would have something considered
>unprecise elsewhere.

I do not understand the harm that you believe is being caused.

Russ