[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: draft of SPKI certificate internet-draft

> >> >Also, should the MAY-DELEGATE default be * instead of 0?  I'll just suggest
> >> >the change and then shut up :-).
> >> 
> >> :)  Of course, I believe it needs to be 0 :)
> I think it has to be 0 by the principle of Least Privilege, applied loosely.
> That is, the simplest thing to make should be the thing with the least
> privilege.

My point was that there is a difference between the default composition
of a cert and the  value an unspecified field, which would affect
performance, though negligibly.

The real question is why Bill felt that * should be the default.