Shibboleth Developers

["David L. Wasley" <>]

I suppose ...

At 8:47 AM -0700 7/26/02, RL 'Bob' Morgan wrote:
> but 3280 says:
>
>    This extension MAY, at the option of the certificate issuer, be
>    either critical or non-critical.
>
>    If the extension is present, then the certificate MUST only be used
>    for one of the purposes indicated.
>
> This is really appallingly underspecified.

means that if it is marked non-critical the relying party can ignore it.

        David

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

   http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--