[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Multi-Tag-Cert Tag Creation and Validation

At 01:51 PM 4/14/97 -0700, Tony Bartoletti wrote:
>Peter Williams wrote:
>>Are SPKI tags limited to a single parent in their construction form?
>>Surely, the single-tag cert could need to reference multiple cert-id's
>>which grant it authority or other privilege.
>Certainly a single SPKI certificate may need to reference multiple
>authorizing certificates, but I cannot see how the validation process
>would be made to understand that a particular tag must be intersected
>with a peer-set of parent tags up the chain (mesh).

Each certificate has one issuer.  If you have multiple credentials which 
drive a PolicyMaker program, each would have only one issuer (possibly 
different ones).  I see no way to define a certificate which itself
has multiple issuers in any simple way.

|Carl M. Ellison  cme@cybercash.com   http://www.clark.net/pub/cme |
|CyberCash, Inc.                      http://www.cybercash.com/    |
|207 Grindall Street   PGP 2.6.2: 61E2DE7FCB9D7984E9C8048BA63221A2 |
|Baltimore MD 21230-4103  T:(410) 727-4288  F:(410)727-4293        |