Re: X.509

[pgut001%cs.auckland.ac.nz@localhost (Peter Gutmann)]

Oskari Saarenmaa <oskari%saarenmaa.fi@localhost> writes:

>I recently submitted a new individual draft for ssh x509 which backs down
>from what we specified in the latest WG draft, and just specifies how we use
>certificates in our implementations.  It's available at
>http://tools.ietf.org/wg/secsh/draft-saarenmaa-ssh-x509-00.txt
>
>Any thoughts?

Looks straightforward and very workable, in particular deferring the rathole
of cert checking entirely to the ITU and IETF PKI docs is a good idea.  So
FWIW it gets my grunt of approval.

Peter.