Hi Brian!

The term PKIX stands for Public-Key Infrastructure using X.509. Using it to 
refer to other technologies that do not use the same encoding as X.509 
certificates is likely to cause confusion. Note that PKIX also refers to the 
entire infrastructure - not just the format of the cert.

Just my two cents.

Ciao
Hannes

Von: Sipos, Brian J. <[email protected]>
Gesendet: Mittwoch, 8. Oktober 2025 15:00
An: [email protected]
Betreff: [COSE] The term "PKIX" and C509

WG,
>From the perspective of a user or a profile specification allowing the use of 
>X509 and C509 in, for example, COSE messages has there been any discussion 
>about terminology in the sense of the following:
Is it expected that the term "PKIX" will exclusively refer to X.509 as defined 
in RFC 5280? Or will PKIX be an umbrella term to include C509 as an equivalent 
encoding of the same information model? Possibly "public key certificate" is a 
better general purpose term, though a little more narrow in scope (a single 
credential) than what PKIX would imply (the whole PKI).

Any thoughts about this?
Brian S.
_______________________________________________
COSE mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to