Subject: Re: X.509

From: [email-masked] (Peter Gutmann)
Date: Mon, 26 Feb 2007 17:27:02 +1300

Oskari Saarenmaa <[email-masked]> writes:

>I recently submitted a new individual draft for ssh x509 which backs down
>from what we specified in the latest WG draft, and just specifies how we use
>certificates in our implementations.  It's available at
>http://tools.ietf.org/wg/secsh/draft-saarenmaa-ssh-x509-00.txt
>
>Any thoughts?

Looks straightforward and very workable, in particular deferring the rathole
of cert checking entirely to the ITU and IETF PKI docs is a good idea.  So
FWIW it gets my grunt of approval.

Peter.