[pkix] Re: Terminology check: "PKI consumer"
Jeremy Rowley <[email protected]> Tue, 4 Feb 2025 02:39:42 +0000
| Newsgroups | gmane.ietf.x509 |
|---|---|
| Message-ID | <BY1PR14MB74135CDBD1D26F08ED8B16F78EF42@BY1PR14MB7413.namprd14.prod.outlook.com> |
--===============8466339680122605082== Content-Language: en-US Content-Type: multipart/related; boundary="_004_BY1PR14MB74135CDBD1D26F08ED8B16F78EF42BY1PR14MB7413namp_"; type="multipart/alternative" --_004_BY1PR14MB74135CDBD1D26F08ED8B16F78EF42BY1PR14MB7413namp_ Content-Type: multipart/alternative; boundary="_000_BY1PR14MB74135CDBD1D26F08ED8B16F78EF42BY1PR14MB7413namp_" --_000_BY1PR14MB74135CDBD1D26F08ED8B16F78EF42BY1PR14MB7413namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable I=92ve seen it used, but imo the term is not synonymous with subject. The s= ubject is in the certificate but a consumer may be a third party using it o= n behalf of the subject. For example, CloudFlare using certs for its custom= er base. Plus DV certs have a subject limited to the domain name. The consu= mer is the entity behind the certificate, which is not listed in the certif= icate. The more common term I=92ve always heard is certificate subscriber b= ut thats not a well defined term either. ________________________________ From: Stephen Wilson <[email protected]> Sent: Monday, February 3, 2025 7:05:50 PM To: [email protected] <[email protected]> Subject: [pkix] Terminology check: "PKI consumer" Greetings PKIers. I have come across an unfamiliar phrase in some new PKI tender documentatio= n. It is related to the energy sector's IEEE 2030.5 standard for certain Io= T device certificates. The phrase is "PKI consumer" which is taken to mean the entity to which a c= ertificate is issued I reckon "Subject" is the unambiguous term of art. Does anyone else see "PKI consumer" being used in the marketplace, and what= do you think? Thanks for any feedback. Cheers, Steve. Stephen Wilson Managing Director Lockstep [A picture containing text, clipart Description automatically generated] E: [email protected]<mailto:[email protected]> M: +61 (0)414 488 851 W: http://lockstep.com.au T: @steve_lockstep Lockstep provides independent specialist advice and analysis on data protection, digital identity and privacy. [https://makingdatabetter.com]<https://makingdatabetter.com> --_000_BY1PR14MB74135CDBD1D26F08ED8B16F78EF42BY1PR14MB7413namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1= 252"> </head> <body> <div dir=3D"ltr"> <div dir=3D"ltr">I=92ve seen it used, but imo the term is not synonymous wi= th subject. The subject is in the certificate but a consumer may be a third= party using it on behalf of the subject. For example, CloudFlare using cer= ts for its customer base. Plus DV certs have a subject limited to the domain name. The consumer is the entity behi= nd the certificate, which is not listed in the certificate. The more common= term I=92ve always heard is certificate subscriber but thats not a well de= fined term either.</div> <div id=3D"ms-outlook-mobile-signature" dir=3D"ltr"> <div></div> </div> </div> <hr style=3D"display:inline-block;width:98%" tabindex=3D"-1"> <div id=3D"divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif" st= yle=3D"font-size:11pt" color=3D"#000000"><b>From:</b> Stephen Wilson <sw= [email protected]><br> <b>Sent:</b> Monday, February 3, 2025 7:05:50 PM<br> <b>To:</b> [email protected] <[email protected]><br> <b>Subject:</b> [pkix] Terminology check: "PKI consumer"</font> <div> </div> </div> <div> <div dir=3D"ltr">Greetings PKIers. <div><br> </div> <div>I have come across an unfamiliar phrase in some new PKI tender documen= tation. It is related to the energy sector's IEEE 2030.5 standard for certa= in IoT device certificates. </div> <div><br> </div> <div>The phrase is "PKI consumer" which is taken to mean the enti= ty to which a certificate is issued </div> <div><br> </div> <div>I reckon "Subject" is the unambiguous term of art. </di= v> <div><br> </div> <div>Does anyone else see "PKI consumer" being used in the market= place, and what do you think? </div> <div><br> </div> <div>Thanks for any feedback. Cheers, </div> <div><br> </div> <div>Steve.</div> <div><br> </div> <div> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)"> = ;</span></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)">Steph= en Wilson</span></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)">Manag= ing Director</span></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <b><span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)">Lo= ckstep </span> </b></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <b><span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)">&n= bsp;</span></b></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <b><span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)"><i= mg src=3D"cid:ii_m6pu8if70" alt=3D"A picture containing text, clipart Description automatically generated" width=3D"106" height=3D"29"></span></b= ><b><span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)"><= /span></b></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)"> = ;</span></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)">E:&nb= sp; <a href=3D"mailto:[email protected]"> [email protected]</a></span></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)">M:&nb= sp; +61 (0)414 488 851</span></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)">W:&nb= sp; <a href=3D"http://lockstep.com.au"> http://lockstep.com.au</a></span></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> <span style=3D"font-size:9pt; line-height:115%; color:rgb(31,73,125)">T:&nb= sp; @steve_lockstep</span></p> <p class=3D"x_MsoNormal" style=3D"margin:0cm; line-height:115%; font-size:1= 1pt; font-family:Calibri,sans-serif"> </p> <p style=3D"margin:0cm; font-size:12pt; font-family:"Times New Roman&q= uot;,serif"><em><span style=3D"font-size:9pt; font-family:Arial,sans-serif;= color:rgb(31,73,125)">Lockstep provides independent specialist advice and = analysis on</span></em><span style=3D"font-size:10pt; font-family:Aria= l,sans-serif; color:black"></span></p> <p style=3D"margin:0cm; font-size:12pt; font-family:"Times New Roman&q= uot;,serif"><em><span style=3D"font-size:9pt; font-family:Arial,sans-serif;= color:rgb(31,73,125)">data protection, digital identity and privacy.</span= ></em><span style=3D"font-size:10pt; font-family:Arial,sans-serif; color:bl= ack"></span></p> <p style=3D"margin:0cm; font-size:12pt; font-family:"Times New Roman&q= uot;,serif"><span style=3D"font-size:10pt; font-family:Arial,sans-serif; co= lor:black"> </span></p> </div> <div><br> </div> </div> <br> <br> <div><a href=3D"https://makingdatabetter.com" target=3D"_blank"><img src=3D= "https://lockstep.com.au/wp-content/uploads/2023/08/mdb-footer-foremail-01.= jpeg" alt=3D"https://makingdatabetter.com"></a><br> </div> </div> </body> </html> --_000_BY1PR14MB74135CDBD1D26F08ED8B16F78EF42BY1PR14MB7413namp_-- --_004_BY1PR14MB74135CDBD1D26F08ED8B16F78EF42BY1PR14MB7413namp_ Content-Type: image/jpeg; name="image.jpeg" Content-Description: image.jpeg Content-Disposition: inline; filename="image.jpeg"; size=1674; creation-date="Tue, 04 Feb 2025 02:10:14 GMT"; modification-date="Tue, 04 Feb 2025 02:35:04 GMT" Content-ID: <ii_m6pu8if70> Content-Transfer-Encoding: base64 /9j/4AAQSkZJRgABAQEAkACQAAD/2wBDAAoHBwkHBgoJCAkLCwoMDxkQDw4ODx4WFxIZJCAmJSMg IyIoLTkwKCo2KyIjMkQyNjs9QEBAJjBGS0U+Sjk/QD3/2wBDAQsLCw8NDx0QEB09KSMpPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT3/wAARCAAsAJ8DASIA AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA AAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3 ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEA AwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSEx BhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3 uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD0IB3c hdxJOK0odKGzMzsWPZT0qh9vFpDJGwTEh6mq82p7SS07s3oDXU4zlsYqyNGOIQarHGshcZ9ela9c xps4vLtUUtG3XdXQibZOsDBiSuQxHBrKrFp2ZcGT0UlLWRYUUUUAFFFFABRRRQAUUUUAFFFFABRR RQAUUUUAc9NpU0x+eEnByOahfQpHYnynBJzwa6aitlXmtiORGBaWn9mzxvIhRc8k8k8VfuNTj8om Bvn7ZWjWP9TH/vf0rOtzGs6mVdydxVfGuaRN+V2RrDU7b+8f++aWXU7eG2+0OxEe7bnb3rKurdoJ cFdqtyozn8Kj1D/kXx/13FJU4trzGpM3rW6jvIBNCSUPQkYqte6xaWL7JXJfuqDJH1qHQGH9jpjk gtx+NY2jQpfau7XID8M+G7nNEaUbyvsir7G7aa5Z3kgjR2Rz0DjGabN4gsYXKeYzkcHYuRWP4itY ba6iMKBN6kkLwOKseH9Ptri0klnjWRi20Buwq3SpqHtNbCu72NP+27L7MJ/NJTdtOAcg+4qZdRt2 svte/EPqRXP6tpdvY2vmQSMxaXaQW4HXisyS5lktY4Cf3UWcAep7mqjh4zV4sHJo6tdfsGBPmNgd ypqIeJbAnrL/AN8Vn3GmLdaRbSacu4Lkuv8AESev41XN8E8uPUNORggwDtKN/wDXpKlB7Bdm4niG wdgPMZc92U4pZNesonKO7gj/AGTVC/02xl0g3lmmzC7gR3HoaZoFrb31tItzEJDE2FJ7A9qn2dPl 5tQu72ND/hIrD/no/wD3wakg1uzuJ0ijdi7nABU1zGFh1Z1S3EypIwEWM5HNbOmyCS+jU6SsHUiT aeOPpTqUYxV0Ck2XJdesYZXjeRgyHaflPWpLXV7O8k8uGX5+wYYzXNPNHDrkskkfmosrZTHXrToL eTUNTZ7WAwxkk9MBeKboRS+QczOxooorkLM7WP8AUx/739Kya2NVUNFHn+9WZ5Y9TXTT+EynuX76 WOTTkIYFjjHr7023tEvdIeBzgMxwR2PrVHyh6mtfTBttMf7RqZLljoOLuzDi0vV7B2Fqw2nurDB/ A1FFpOqwT+dFHtkyTkMK6ylp/WJdkVyo5oaLf6hceZqEgUYxkEE/QDoKbFY6xprOlqAyMeowR9ee ldPSUvby2aVg5Uco3h+9NuZGG6ZnyU3du5J9a07bSCdDa2mjCTMS2evzdua2KWlKvOSBRRx66JqY G0IVHoJMCrVxa6xqMccE8KKqH75IrpqSqeIk3eyDlM+WwaPQ2s4fncR7R2yag0CxnsknFwm0sQRz mtikrL2j5XHuOxzD6ZqUWpSXNvEM+YzKSw6Gp2/4SB1K/KM9xtBroaKt1m90hcph6PoklpObi6YG TB2qDnGepJrbxS0VnObm7saVj//Z --_004_BY1PR14MB74135CDBD1D26F08ED8B16F78EF42BY1PR14MB7413namp_-- --===============8466339680122605082== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KcGtpeCBtYWls aW5nIGxpc3QgLS0gcGtpeEBpZXRmLm9yZwpUbyB1bnN1YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRv IHBraXgtbGVhdmVAaWV0Zi5vcmcK --===============8466339680122605082==--