Subject: draft-ietf-pkix-ldap-*: security considerations

From: "Kurt D. Zeilenga" <[email-masked]>
Date: Tue, 30 Nov 2004 16:48:16 -0800

The security considerations sections of these documents
are inadequate and seem to nothing more than echo
general security concerns.  Given the nature of the
information being stored, I would suspect there would
be some significant other considerations.  In particular,
I am surprised not to see any discussion (in the security
consideration section or elsewhere) on the impact of
data inconsistencies between user and certificate objects.

Kurt