RE: Logotypes in certificates

Stephen Kent <kent@bbn.com> Fri, 23 March 2001 15:13 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id KAA17516 for <pkix-archive@odin.ietf.org>; Fri, 23 Mar 2001 10:13:48 -0500 (EST)
Received: from localhost by above.proper.com (8.9.3/8.9.3) with SMTP id HAA16402; Fri, 23 Mar 2001 07:13:04 -0800 (PST)
Received: by mail.imc.org (bulk_mailer v1.12); Fri, 23 Mar 2001 07:12:25 -0800
Received: from po1.bbn.com (PO1.BBN.COM [192.1.50.38]) by above.proper.com (8.9.3/8.9.3) with ESMTP id HAA16356 for <ietf-pkix@imc.org>; Fri, 23 Mar 2001 07:12:24 -0800 (PST)
Received: from [128.33.4.39] (comsec.bbn.com [128.33.4.39]) by po1.bbn.com (8.9.1/8.9.1) with ESMTP id KAA24799; Fri, 23 Mar 2001 10:09:02 -0500 (EST)
Mime-Version: 1.0
X-Sender: kent@po1.bbn.com
Message-Id: <p05010408b6e11769eb54@[128.33.4.39]>
In-Reply-To: <5.0.0.25.2.20010322185247.0420d990@mail.addtrust.com>
References: < <D44EACB40164D311BEF00090274EDCCA1E740A@sydneymail1.zergo.com.au> <D44EACB40164D311BEF00090274EDCCA1E740A@sydneymail1.zergo.com.au> <5.0.0.25.2.20010322185247.0420d990@mail.addtrust.com>
Date: Fri, 23 Mar 2001 10:11:25 -0500
To: Stefan Santesson <stefan@addtrust.com>
From: Stephen Kent <kent@bbn.com>
Subject: RE: Logotypes in certificates
Cc: ietf-pkix@imc.org
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Precedence: bulk
List-Archive: http://www.imc.org/ietf-pkix/mail-archive/
List-ID: <ietf-pkix.imc.org>
List-Unsubscribe: mailto:ietf-pkix-request@imc.org?body=unsubscribe

Stefan,

>Steve,
>
>There was a suggestion during a dinner yesterday that logotypes 
>actually could be provided as a policy qualifier. That would 
>actually solve your problem since you could directly tie acceptance 
>of logotypes in certificates to a particular policy.
>
>This enables you to control the path validation problem with the use 
>of policy constraints.
>

I'd be comfortable with that approach, except that we have 
discouraged use of policy qualifiers, as Russ noted.

Let me suggest again that you send another message that includes a 
comprehensive rationale for inclusion of logotypes, indicating what 
types of certs would be allowed to contain them, what reference form 
you envision, and what controls you think should be employed to 
prevent the sorts of misuse I warned about.  With a concrete 
proposal, and well articulated rationale on the table, I think we 
have a better chance of making progress.

Steve