- From: Mary Ellen Zurko <mzurko@us.ibm.com>
- Date: Fri, 2 Jan 2009 14:21:54 -0500
- To: yngve@opera.com
- Cc: public-wsc-wg@w3.org
Received on Friday, 2 January 2009 19:22:50 UTC
Can someone connect the dots for me on this? We have this comment in a LC response: Section 5.1.2: If the certificate's Subject field does not have an Organization attribute, then user agents MUST NOT consider the certificate as an augmented assurance certificate, even if it chains up to an AA-qualified trust root. User agents MAY consider such a certificate as an ordinary validated certificate. What happens if a certificate's Subject field is empty, but the SubjectAltName extension is marked critical and the subject's identity is specified in the SAN field? All things being equal (i.e., an OID marks the certificate), would such a certificate be considered trusted? Which generated this action and response from Yngve: http://lists.w3.org/Archives/Public/public-wsc-wg/2008Oct/0019.html So, what is the answer to the (second) question? Is it "yes"?
Received on Friday, 2 January 2009 19:22:50 UTC