Design Team’s Proposal Retain 3279 OID/parameters Critical mass is finally emerging! Specify certificate extension as SHOULD implement for CAs and clients Criticality provides opt-in/opt-out mechanism to select interoperability or control Applications can take advantage of hints in noncritical extension, even where unrecognized by the path validation module Consistent with current application/protocol expectations (Alg OID plus extensions) |