On Tue, 5 Sep 2017 10:46:18 -0700
Eric Rescorla <[email protected]> wrote:

> Say that a CA spins up two subordinates that happen to share the same
> key. I agree it's foolish.

That's not a problem, since the name of the CA is included in the
Issuer field of the TBSCertificate, which is part of the Merkle leaf
input along with the CA's public key hash.

Regards,
Andrew

_______________________________________________
Trans mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/trans

Reply via email to