draft-yergeau-rfc2279bis-04

[Russ Housley <housley@vigilsec.com>]

  Russ Housley        [   ]     [   ]       [ X ]      [   ]

  Section 10 should include an additional paragraph.  When UTF-8 is used 
in identifiers, comparison of two strings is needed.  For example, an 
identifier appears in a credential and in access control list entries.  It 
seem that the exact match of UTF-8 is not simply a buffer comparison.  I 
think that a warning is needed.  Tell people that rules for comparison need 
to be specified in cases where octet-by-octet comparison is not sufficient.