Iain, You're right, but there the Basic Constraints extension can be used to limit the length of the cert chain, and thus minimize the problem.
Steve _______________________________________________ perpass mailing list [email protected] https://www.ietf.org/mailman/listinfo/perpass
