Subject: Re: Ptr to doc on "how end-entity authenticates cert_req to CA"

From: "Bob Blakley" <[email-masked]>
Date: Sun, 1 Aug 1999 21:15:08 -0500

Bill,

This isn't specified; it is left up to the CA service provider to determine
and state in his certification practice statement.
It's an operational trust parameter which might be handled differently by
different providers whose
clients use the certificates for tasks of varying degrees of sensitivity.

--bob

Bob Blakley ([email-masked])
Chief Scientist, Dascom
-----Original Message-----
From: Bill Doster <[email-masked]>
To: [email-masked] <[email-masked]>
Date: Thursday, July 22, 1999 4:54 PM
Subject: Ptr to doc on "how end-entity authenticates cert_req to CA"

>After looking through all the IETF PKIX drafts, I'm still in the dark as to
what information is provided by the end-entity to authenticate itself as the
entity named in the cert req
>(as opposed to demonstrating possession of the cert's associated private
key).
>
>Perhaps my question is malformed to begin with?
>
>Pointers anyone?
>
>