[rfc-i] Signing RFCs

[Olaf Kolkman]

On Jun 29, 2011, at 3:13 PM, Russ Housley wrote:

>> 
>> Sorry, I have to be pedantic (its one of those days) but I hope you mean that the certificates are donated to the 'RFC Editor'. I understand that the actual work happens at the publisher.
> 
> I am not sure what you are driving at here.  I would expect the certificate to name the RFC Publisher in the subject name, but include rfc-editor at rrfc-editor.org as the email address.

What I am getting at is that this is an RFC Editor function (the 'entity', not the persons or the function).

Putting the RFC Publisher's name in a certificates that is supposed to identify the entity IMHO not the right thing to do.

--Olaf

________________________________________________________ 

Olaf M. Kolkman                        NLnet Labs
http://www.nlnetlabs.nl/