Shibboleth Developers

[Scott Cantor <>]

> >    This extension MAY, at the option of the certificate issuer, be
> >    either critical or non-critical.
> >
> >    If the extension is present, then the certificate MUST only be
used
> >    for one of the purposes indicated.
> >
> >This is really appallingly underspecified.
> 
> means that if it is marked non-critical the relying party can 
> ignore it.

I think that's the underspecified part. Doesn't "non-critical" just mean
that if you don't understand it, you can still continue? I don't think
the intention is to ignore the meaning if you do understand it.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--