Peter:
As noted in a posting after the face-to-face WG eeting, ths CMS ASN.1 was
changed to accompdate signatures with SKI references. However, the issuer
and serial number will be required for S/MIME v3 (see MSG spec).
I think this issue is closed. Agree?
Russ
At 10:08 AM 12/9/98 +0000, Peter Gutmann wrote:
Russ Housley <housley(_at_)spyrus(_dot_)com> wrote:
Support for PGP requires a bit more than this. You also need to carry
non-X.509 PGP certificates. CMS does not permit this.
The need to lug armfuls of certs around with you wherever you go is an
artifact of X.509, not something required by PGP. All that PGP (and
SPKI) require is a way to identify the key used to sign or encrypt data
(the PGP native format doesn't even provide a way to communicate certs
a la CMS's CertificateSet, so it's really not an issue).
(To put it another way, given support for PGP and SPKI key ID's in the
xxxInfo's, I can have a fully compatible implementation running in an
afternoon).
Peter.