#85: Precertificate CMS structures MUST be DER

 Ben wrote:
 "Just chatting with Adam Langley, and he points out that CMS allows
 BER. We should subset it to DER only for CT."

 I agree that we definitely need to specify that the TBSCertificate
 included in the CMS structure MUST be DER.

 Whilst we could (I think) in theory permit BER for the other parts of the
 CMS structure, it would be simpler to mandate DER throughout.

-- 
-------------------------------------+-------------------------------------
 Reporter:                           |      Owner:
  [email protected]           |  [email protected]
     Type:  defect                   |     Status:  new
 Priority:  blocker                  |  Milestone:
Component:  rfc6962-bis              |    Version:
 Severity:  -                        |   Keywords:
-------------------------------------+-------------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/trans/trac/ticket/85>
trans <http://tools.ietf.org/trans/>

_______________________________________________
Trans mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/trans

Reply via email to