[x500standard] SV: Trust Anchor defn
- From: "Erik Andersen" <era@xxxxxxx>
- To: <x500standard@xxxxxxxxxxxxx>, "SG17-Q11" <t09sg17q11@xxxxxxxxxxxxx>
- Date: Fri, 15 Jul 2011 15:24:25 +0200
Thanks David,
The things were written quite hastily here in Sweden with grandchildren
running around.
Erik Andersen
Andersen's L-Service
Elsevej 48,
DK-3500 Vaerloese
Denmark
Mobile: +45 2097 1490
e-amail: era@xxxxxxx
Skype: andersen-erik
http://www.x500.eu/
http://www.x500standard.com/
http://dk.linkedin.com/in/andersenerik
-----Oprindelig meddelelse-----
Fra: x500standard-bounce@xxxxxxxxxxxxx
[mailto:x500standard-bounce@xxxxxxxxxxxxx] På vegne af David Chadwick
Sendt: 15. juli 2011 13:49
Til: x500standard@xxxxxxxxxxxxx
Emne: [x500standard] Trust Anchor defn
Hi Erik
there are several typos in X.509 in the note of 7.5 Trust Anchor, viz:
NOTE ? trust anchor is time made synonymous with the term
root-CA. In a strict hierarchy, the CA at the top of the
hierarchy may be called the root CA. However, in more complex
environment, it may not be possible to identify a root CA.
Even when it is possible to identify a root CA, a certificate-using
system it may not necessarily consider it a trust anchor.
Some intermediate CA may instead take that role.
maybe reword this to
NOTE ? trust anchor has in the past been synonymous with the
term root-CA.
In a strict hierarchy, the CA at the top of the
hierarchy may be called the root CA. However, in more complex environments,
it may not be possible to identify a root CA.
Even when it is possible to identify a root CA, a certificate-using system
may not necessarily consider it a trust anchor.
Some intermediate CA may instead take that role.
regards
David
*****************************************************************
David W. Chadwick, BSc PhD
Professor of Information Systems Security
School of Computing, University of Kent, Canterbury, CT2 7NF
Skype Name: davidwchadwick
Tel: +44 1227 82 3221
Fax +44 1227 762 811
Mobile: +44 77 96 44 7184
Email: D.W.Chadwick@xxxxxxxxxx
Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html
Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html
Entrust key validation string: MLJ9-DU5T-HV8J
PGP Key ID is 0xBC238DE5
*****************************************************************
-----
www.x500standard.com: The central source for information on the X.500
Directory Standard.
-----
www.x500standard.com: The central source for information on the X.500 Directory
Standard.
Other related posts:
- » [x500standard] SV: Trust Anchor defn - Erik Andersen
