[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: draft of SPKI certificate internet-draft
> >> >Also, should the MAY-DELEGATE default be * instead of 0? I'll just suggest
> >> >the change and then shut up :-).
> >>
> >> :) Of course, I believe it needs to be 0 :)
>
> I think it has to be 0 by the principle of Least Privilege, applied loosely.
> That is, the simplest thing to make should be the thing with the least
> privilege.
My point was that there is a difference between the default composition
of a cert and the value an unspecified field, which would affect
performance, though negligibly.
The real question is why Bill felt that * should be the default.
brian