Subject: 3280 Bis: Initial Values for Permitted and Excluded Subtrees

From: "Santosh Chokhani" <[email-masked]>
Date: Thu, 24 Aug 2006 16:00:09 -0700

All,

The new version of X.509 (2005 Edition) permits initial values other
than infinity and null for permitted and excluded subtrees respectively.

Should we also revise 3280Bis to include these options so that the
relying parties can constrain the trust anchors?

I would consider infinity and null values only for the two respective
fields still compliant with the applicable standard.

Thanks in advance for your opinion.

Santosh Chokhani 
Orion Security Solutions, Inc. 
1489 Chain Bridge Road, Suite 300 
McLean, Virginia 22101 
(703) 917-0060  Ext. 35 (voice) 
(703) 917-0260 (Fax) 
[email-masked] 
Visit our Web site 
http://www.orionsec.com <http://www.orionsec.com>