ietf-smime
[Top] [All Lists]

Re: CMS Critical flag for signed attributes?

1998-01-06 08:06:03
All,

That sounds good to me.

- John Pawling


At 09:14 AM 1/6/98 -0500, David P. Kemp wrote:

After some private discussions with Phill, I agree with his proposal
to create a single S/MIME attribute which v3 clients must always treat
as critical.  That attribute would have syntax SEQUENCE OF OBJECT IDENTIFIER
and would be a list of other attributes which are to be treated as
critical (must be understood/supported or the message signature is
not considered valid) for that message.

This would have no mandatory effect on v2 user agents, but does enable
the enforcement of criticality in v3, and appears to be the simplest
fully compatible method of doing so.

Dave K.



From: jsp(_at_)jgvandyke(_dot_)com (John Pawling)

All,

I agree with Phillip's proposal:

One entirely backwards compatible method of doing this would be to
create
an OID whose attributes would simply be a list of critical extensions.
S/MIME v3 clients would be required to understand the OID semantics.