Re: X.509 certificate

There's a NWI proposal under ballot in the ISO TC68/SC2
security group that if approved will define an all XML markup
certificate based on the schema defined in ANSI X9.68.

Phil


Joseph Reagle wrote:

>On Friday 17 January 2003 16:56, Joseph Swaminathan wrote:
>  
>
>>certificate which is in binary format. So for a box
>>to support XMLDSIG, it needs to have both XML parser
>>as well as ASN.1 parser isnt' it.
>>    
>>
>
>Yes, I've been calling this the "Frankenstein Complex" for a little over a 
>year now I think.
>
>  
>
>>    I understand using XKMS this validation can be
>>ofloaded to a key management system. But if a box
>>has to do all the validation itself, then does it
>>require both XML & ASN.1 parser to validate
>>certificates isnt it.
>>    
>>
>
>Generally yes -- unless they use XKMS, or use a native XKMS cert format.
>
>
>  
>