Subject: Re: FW: New Liaison Statement, "Liaison to IETF on the removal of upper bound in X.509"
From: Paul Hoffman <[email-masked]>
To: Stefan Santesson <[email-masked]>, "[email-masked]" <[email-masked]>
Date: Tue, 9 Oct 2007 18:16:39 -0400
List-Id: <ietf-pkix.imc.org>

It seems like there are two questions here:

- Do we object to the ITU making the upper bound on DirectoryString optional

- Should we do anything to draft-ietf-pkix-rfc3280bis to reflect that

The answer to the first should be "no, we don't". Russ gave a list 
that shows the the ITU has a *long* way to go before it gets rid of 
the silly maximum lengths in X.509.

For me, the answer to the second question is "no" because of the 
large number of other silly limitations, most notably CommonName 
being 64 characters.

--Paul Hoffman, Director
--VPN Consortium