[rfc-i] Signing RFCs

Olaf Kolkman olaf at NLnetLabs.nl
Wed Jun 29 08:08:32 PDT 2011

On Jun 29, 2011, at 3:13 PM, Russ Housley wrote:

>> Sorry, I have to be pedantic (its one of those days) but I hope you mean that the certificates are donated to the 'RFC Editor'. I understand that the actual work happens at the publisher.
> I am not sure what you are driving at here.  I would expect the certificate to name the RFC Publisher in the subject name, but include rfc-editor at rrfc-editor.org as the email address.

What I am getting at is that this is an RFC Editor function (the 'entity', not the persons or the function).

Putting the RFC Publisher's name in a certificates that is supposed to identify the entity IMHO not the right thing to do.



Olaf M. Kolkman                        NLnet Labs


More information about the rfc-interest mailing list