RE: Request change in son-of-rfc2633

Russ Housley <housley(_at_)vigilsec(_dot_)com> writes:

> Further, if there is a collision, an implementation can try the very small
> number of public keys that have the same identifier.
How does it know when to stop looking for more certs?  For example, what if it
can only find one cert and it's the wrong one?

Peter.