Subject: Re: CPS Pointer

From: Roger Younglove <[email-masked]>
Date: Tue, 01 May 2001 07:40:18 -0400

No, I believe that HTTP and FTP forms of URI are sufficient. As long as the 
relying party has a pointer to the CPS that should be sufficient.
At 02:32 PM 04/30/2001 , Housley, Russ wrote:
>Trevor Freeman noticed we don't have any guidelines for what forms of URI 
>are supported with the CPS Pointer.  Presently, we say:
>
>    The CPS Pointer qualifier contains a pointer to a Certification
>    Practice Statement (CPS) published by the CA.  The pointer is in the
>    form of a URI.  Processing requirements for this qualifier are a
>    local matter.  No action is mandated by this specification regardless
>    of the criticality value asserted for the extension.
>
>So, we are not mandating any behavior on the client.  Perhaps we should 
>say something about the CA.  Trevor suggests that HTTP and FTP forms of 
>URI are sufficient.  Does anyone see any reason to support other protocols 
>for CPS fetching?
>
>Russ

--------
TTFN
Roger W. Younglove, CISSP
Distinguished Member of Consulting Staff
Lucent Worldwide Services--Information Security
100 Galleria Officentre, Ste. 220
Southfield, MI 48034-8428
Numeric page: 888.935.6755
E-mail page:
[email-masked]
eFax number: 413.425.5368
www.lucent.com/netcare