search

cose-wg / X509

Define a set of COSE header fields that can be used to carry and reference X.509 certificates
Other
4 stars 8 forks source link

Register a CBOR tag for X.509 cert? #24

Closed laurencelundblade closed 3 years ago

laurencelundblade commented 4 years ago

We have registered tags for lots of common data structures. X.509 certs are a common data structure. This RFC would be a convenient place to do it.

It could be polymorphic based on the type of the tag content

This could allow the removal of x5t and x5u entirely. They would just be folded in with x5bag and x5chain. Any individual cert in the bag or the chain could be any of the types.

This is partly in conflict with my issue #22

jimsch commented 4 years ago

I am not sure why you think this would be needed. The only reasonable answer here is to say that it is a DER encoded certificate and be done with it. There is no need to carry a PEM cert in the message itself. Having the thumbprint or URI would mean that things will get really sticky fast because the same certificate could be referenced many times by different methods. That is just confusing.

laurencelundblade commented 3 years ago

It was a thought. Removing the comment.