Re: discuss: draft-ietf-pkix-pi-07.txt

["Steven M. Bellovin" <smb@research.att.com>]

In message <E1A9xFi-000ERu-KT@roam.psg.com>, Randy Bush writes:
>the rfc-ed has their job cut out for them.
>
>---
>
>i think there are some rituals that have to be followed re utf8, and
>they are not being followed.  but i am not an expert in this.  e.g. i
>suspect this is deadly
>
>      The Alphanumeric Identifier Match rule compares for equality a
>      presented value with an attribute value of type UTF8String 
>      or IA5String, which is interpreted as a series of alphanumeric 
>      characters.  The rules for matching are that a working comparison 
>      value is constructed from each of the two values by including 
>      only the digits and alphabetic characters appearing in the value; 
>      and then the two comparison values are compared using 
>      CaseIgnoreMatch.  This rule is intended for use only with 
>      identifiers in variants of the Latin, Greek, and Cyrillic scripts.

I raised that issue the first time we saw that document.  If I recall 
correctly, Leslie -- who knows far more about that stuff than I do -- 
persuaded me that it wasn't a problem here.

		--Steve Bellovin, http://www.research.att.com/~smb