[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Q: Resolving groups?
Hello.
Perhaps this is a silly question or it has been asked before, but I
need some help regarding the resolution of names that were introduced
in name certificates. In section 5 spki-cert-structure-05.txt, p.23 ff,
name certs are described as defining groups, i.e. there can be multiple
name certs by a single issuer for the same name but different subjects.
This is straightforward, useful and obviously neccessary.
In section 5.3, however, the draft talks about reducing such a name.
What is it reduced to if there are multiple subjects with that name,
i.e. if the group has multiple members? If, e.g., "fred" is such a
group name (relative to hash md5 |abc...|), I don't see how you can
use it in situations like
(subject (name (hash md5 |abc...|) fred sam george mary).
What does it mean to resolve sam relative to a group? Am I
missing something obvious?
Thanks, regards and a Happy New Year,
Gerald Brose.
--
Gerald Brose, Mail: brose@inf.fu-berlin.de
FU Berlin (for PGP key see:) http://www.inf.fu-berlin.de/~brose
Institut f. Informatik Ph-one: (++49-30) 838-75112
Berlin, Germany Ph-ax: (++49-30) 838-75109