I concur with Rob's suggestion.

Stevez
#85: Precertificate CMS structures MUST be DER

  Ben wrote:
  "Just chatting with Adam Langley, and he points out that CMS allows
  BER. We should subset it to DER only for CT."

  I agree that we definitely need to specify that the TBSCertificate
  included in the CMS structure MUST be DER.

  Whilst we could (I think) in theory permit BER for the other parts of the
  CMS structure, it would be simpler to mandate DER throughout.


_______________________________________________
Trans mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/trans

Reply via email to