At 02:11 PM 11/20/98 -0500, Al Arsenault wrote:
The CERT draft, section 2.2, first sentence, says "Receiving agents MUST
support PKIX V1 and PKIX v3 certificates..."
There are no PKIX v1 certificates. (This looks like an artifact of a
global replacement X.509 -> PKIX.) Recommend that this be changed to
"Receiving agents MUST support PKIX certificates..." unless there is some
other type of certificates that you want to support (say, for backward
compatibility with S/MIMEv2). If there is such a type of certificates,
please identify it.
I agree. I think we should just say "...support PKIX certificates." This is
particularly hairy because PKIX version 2 certificates have a "1" in their
version field and so on.
--Paul Hoffman, Director
--Internet Mail Consortium