Re: Critical certificate policies extension

Niklas Matthies <[email protected]> writes:

>But you don't have different sets of applicable extension-specific
>requirements depending on whether the extension is critical or not.

It certainly doesn't seem to be correct behaviour.  When something like this
crops up in code, particularly when it's been implemented as a configurable
option, it's often because some large customer asked for it and it was made
configurable because everyone else doesn't want it that way... does the US
Federal PKI or other government PKI require this behaviour?

Peter.