RE: Re: Certificate Validation and Subject Analysis

> -----Original Message-----
> From: Frank Thompson [mailto:[email protected]] 
> Sent: Thursday, December 07, 2006 10:37 AM
> To: Francisco Obispo
> Cc: Alexander Mayrhofer; [email protected]; Hollenbeck, Scott
> Subject: Re: [ietf-provreg] Re: Certificate Validation and 
> Subject Analysis
> 
> 
> Hello,
> 
> Afilias does not employ CN idenity ACL checking either for the same 
> reasons as NIC.VE, but use other hardware/software solutions 
> for client 
> idenity and IP ACL validation.
> 
> Therefore we also believe that this does not belong in the 
> EPP protocol.

Well, you guys will need to take that up with the IESG after reviewing
RFC 3280.  In the mean time, what do you do if the certificate presented
from a client has valid certification path signatures, but the names
have nothing to do with that client?

-Scott-