Subject: Re: [mile] CN-ID vs DNS-ID for RID over HTTPS

From: <[email-masked]>
Date: Wed, 25 Jan 2012 03:00:13 -0500

Brian,

I am a colleague of Kathleen Moriarty's and she asked that I comment on this thread.  As a practical matter, DNS-ID has been supported by most CAs for a number of years now.  If a CA system does not support the DNS-ID, I would suggest that that CA be encouraged/forced to live up to the standard rather than perpetuate possible security weaknesses.  Because of this, I believe that legacy support should not be extended.

Regards,

Karen Reinhardt
Lead PKI Architect, Professional Services
RSA, The Security Division of EMC
(512)788-4333