On Wed, Sep 6, 2017 at 8:12 PM, Andrew Ayer <[email protected]> wrote:
> On Tue, 5 Sep 2017 10:46:18 -0700 > Eric Rescorla <[email protected]> wrote: > > > Say that a CA spins up two subordinates that happen to share the same > > key. I agree it's foolish. > > That's not a problem, since the name of the CA is included in the > Issuer field of the TBSCertificate, which is part of the Merkle leaf > input along with the CA's public key hash. > Thanks. That's helpful. -Ekr > > Regards, > Andrew >
_______________________________________________ Trans mailing list [email protected] https://www.ietf.org/mailman/listinfo/trans
