[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: X.509 ACs vs. SPKI?

Only minor quibble I'd have is...

> >2) Is there an assumption that an AC "must always" contain a reference to an
> >x.509 ID-cert ?
> My view of the model says yes.  ACs don't exist independent of public key
> certs.

Its also possible, though most likely out of PKIX's scope, for an 
AC to be linked to e.g. Kerberos authentication or some other
symmetric based mechanism.

Stephen (the one just finishing his shift:-)