Hi Peter! Peter Saint-Andre schrieb: >> You also won't >> find any recommended CA in RFC 2818 (HTTP over TLS). > > Certificates for websites don't include specialized OIDs, either.
Well dNSName is some sort of specialized OID for websites (and other services using the same addressing sceme 'domains'). The id-on-xmppAddr is also not a special OID for XMPP, but an OID for any service sharing the same address space (e.g. my SMS service shares the address space with my Jabber server and e.g. if I would authenticate the SMS clients using X.509 certificates, I would have to use id-on-xmppAddr as well. > How do you suggest we make server developers aware that it's a good idea > to bundle the XMPP ICA cert and StartCom root cert (and for client > developers the root cert)? Do we really have to make them aware of? The fact that the XSF runs the ICA and that many servers in Jabber space already use certificates from there should make server developers aware enough about the existence of the StartCom CA and that it is good to bundle this CA. So well my "problem" might be, that I do not see any need to make developers more aware of the existence as they already are. Matthias -- Matthias Wimmer Fon +49-700 77 00 77 70 Züricher Str. 243 Fax +49-89 95 89 91 56 81476 München http://ma.tthias.eu/
