Erwann,
The "TLS" syntax/notation is also used to describe certificates and
messages in ITS world. It's very bad, but that's not RFC5246 authors's
fault.
What is the "ITS" world? And is it under the IETF standards umbrella? if
not, then this is
not a good rationale for veering from the statement in 5246.
X.509 permits the inclusion of anything in an extension, as long as
it's enclosed in something that has an ASN.1+DER representation,
whence the double OCTET STRING sometimes found. That's not new to CT.
True, but I think that is not commonly done in standard extensions. Do
you have some examples
that counter my perception? In my experience, people developing
extensions for
X.509 usually try to avoid cramming arbitrary data into an OCTET string.
Steve
_______________________________________________
Trans mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/trans