pkix-7----Page:23
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20  21  22  23  24  25 

Design Team’s Proposal
Retain 3279 OID/parameters
Critical mass is finally emerging!
Specify certificate extension as SHOULD implement for CAs and clients
Criticality provides opt-in/opt-out mechanism to select interoperability or control
Applications can take advantage of hints in noncritical extension, even where unrecognized by the path validation module
Consistent with current application/protocol expectations (Alg OID plus extensions)
PPT Version