X509Data

I've a few questions regarding the X509Data element.

1) Why impose the choice over X509IssuerSerial, X509SKI and X509SubjectName in the definition of X509Data?  There are certainly situations where having X509IssuerSerial and X509SubjectName is desirable/necessary.  Including both is still possible to do using the DTD/Schema as it currently exists but is not as concise as simply removing the choice.  

2) There are some issues regarding the string representation of DNs as described in RFC2253.  Minimally, it permits the usage of '<' and '>'  in ways that won't work in XML.

From XML spec:

The ampersand character (&) and the left angle bracket (<) may appear in their literal form only when used as markup delimiters, or within a comment, a processing instruction, or a CDATA section.

From RFC2253, amongst other references to '<' and '>':

Implementations MUST allow a value to be surrounded by quote ('"'ASCII 34) characters, which are not part of the value.  Inside the quoted value, the following characters can occur without any escaping:

                   ",", "=", "+", "<", ">", "#" and ";"



Carl Wallace
CygnaCom Solutions