Let me restate this with fewer typos:

I think what Cullen is saying is:

If the certificate presented for a SIP domain contains Extended Key
Usage values [RFC 3280] , implementations MAY validate those
values using the techniques described in I-D.sip-eku[9].

and if that's what he's saying, I think this is in conflict with the  
text of RFC 3280, which makes validation a MUST.

--
Dean


_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [EMAIL PROTECTED] for questions on current sip
Use [EMAIL PROTECTED] for new developments on the application of sip

Reply via email to