IETF Logo Mail Archive

Re: Logotypes in certificates

Dean Povey <povey@dstc.qut.edu.au> Wed, 21 March 2001 04:15 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id XAA14303 for <pkix-archive@odin.ietf.org>; Tue, 20 Mar 2001 23:15:08 -0500 (EST)
Received: from localhost by above.proper.com (8.9.3/8.9.3) with SMTP id UAA06141; Tue, 20 Mar 2001 20:14:08 -0800 (PST)
Received: by mail.imc.org (bulk_mailer v1.12); Tue, 20 Mar 2001 20:13:56 -0800
Received: from thunder.dstc.qut.edu.au (thunder.dstc.qut.edu.au [131.181.71.1]) by above.proper.com (8.9.3/8.9.3) with ESMTP id UAA06106 for <ietf-pkix@imc.org>; Tue, 20 Mar 2001 20:13:54 -0800 (PST)
Received: from dstc.qut.edu.au (garnet.dstc.qut.edu.au [131.181.71.36]) by thunder.dstc.qut.edu.au (8.10.1/8.10.1) with ESMTP id f2L49lm27322; Wed, 21 Mar 2001 14:09:48 +1000 (EST)
Message-Id: <200103210409.f2L49lm27322@thunder.dstc.qut.edu.au>
X-Mailer: exmh version 2.2 06/23/2000 with nmh-1.0.4
To: Stefan Santesson <stefan@addtrust.com>
cc: Stephen Kent <kent@bbn.com>, Tim Moses <tim.moses@entcws.entrust.com>, ietf-pkix@imc.org
Subject: Re: Logotypes in certificates
In-Reply-To: Message from Stefan Santesson <stefan@addtrust.com> of "Tue, 20 Mar 2001 23:06:38 +0100." <5.0.0.25.2.20010320195950.027eee10@mail.addtrust.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Date: Wed, 21 Mar 2001 14:09:47 +1000
From: Dean Povey <povey@dstc.qut.edu.au>
Precedence: bulk
List-Archive: http://www.imc.org/ietf-pkix/mail-archive/
List-ID: <ietf-pkix.imc.org>
List-Unsubscribe: mailto:ietf-pkix-request@imc.org?body=unsubscribe

>
>I also suppose that the only way a logotype could undermine the naming 
>schema is if logotypes have such significant impact on entity recognition, 
>that users in general would se the logo and not notice that the DN is in 
>conflict with the logotype.
>
>If this is correct then you acknowledge the importance of logotypes as 
>instrument of recognition, which speaks for that we should find a way to 
>handle logotypes in certificates and not the opposite.

Surely it would be the responsibility of the CA to determine the logo -> 
DN mapping.  From a software perspective the path validation algorithm 
should not be affected. The logo is just there to help the user make a 
better decision about whether to trust the certificate.

Cheers.



-- 
Dean Povey,         | e-m: povey@dstc.edu.au | JCSI:  Java Crypto Toolkit 
Research Scientist  | ph:  +61 7 3864 5120   | uPKI:  C PKI toolkit for embedded
Security Unit, DSTC | fax: +61 7 3864 1282   |        systems
Brisbane, Australia | www: security.dstc.com | Oscar: C++ PKI toolkit

v2.23.0 | Report a Bug | By Email