Re: [pkix] a question of cert (and OCSP) extension syntax

Melinda,

I am in the camp that believes 6962 does not need to change in this regard.

So, even if we got the information you are seeking below, I hope the first try will be to tell that software developer that they are doing this wrong.  They should not try to decode an extension they do not understand.

-----Original Message-----
From: pkix [mailto:pkix-bounces@ietf.org] On Behalf Of Melinda Shore
Sent: Tuesday, March 31, 2015 11:52 AM
To: pkix@ietf.org
Subject: Re: [pkix] a question of cert (and OCSP) extension syntax

On 3/31/15 7:18 AM, Paul Hoffman wrote:
> On Mar 31, 2015, at 8:03 AM, Russ Housley <housley@vigilsec.com>
> wrote:
>> ASN.1 processing is needed to get the value of the OCTET STRING from 
>> the extension, so I do not understand the point you are trying to 
>> make.
> 
> At the beginning of the thread, it seemed like the issue was
> *encoding* the values, not decoding them. 

Right, but there seems to be some suggestion that there is certificate processing software out there that tries to decode the contents of an extension it doesn't recognize or understand.  I'm hopeful that people raising this concern can be more specific and point out what software it is.  *That* would be a pretty good example of the new information we've been asking for.

Melinda

_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix