Re: [pkix] purpose of LDAP in PKI

One possible use case could be that others can use your certificate 
(from LDAP) for encryption e.g. sending encrypted emails or encrypted 
documents to you.

The other possible use case could be SSL client authentication where 
certificates are presented by client and matched by applications against 
user certificates published at LDAP.

Regards,
Bilal.

On 2/18/2013 6:53 PM, Andris Berzins wrote:
>
>
>
> Quoting *Peter Gutmann <pgut001@cs.auckland.ac.nz> 
> <mailto:pgut001@cs.auckland.ac.nz>*:
>
>     Andris Berzins <pkix@inbox.lv> writes:
>
>     >What could be the reason why end user certificates should be
>     stored in LDAP
>     >by the CA and made publicly available?
>
>     There isn't one. It's (ancient) historical baggage based on
>     X.509's origins
>     in X.500, and some of the people writing the standards haven't
>     realised yet
>     that HTTP won.
>
>
>
> When I apply for ID-card having authentication and qualified signature 
> certificate on it,
> I have to checkbox whether I want my certificates to be published in LDAP.
> I get no clear answer how could I benefit from my certificates being 
> published.
>
>
>
>
>     Peter.
>     _______________________________________________
>     pkix mailing list
>     pkix@ietf.org
>     https://www.ietf.org/mailman/listinfo/pkix
>
>
>
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix