As part of the implementation effort for the End Entity PKI, a new assertion with "CTProof" type was created. The assertion will contain absence or presence proofs for a certain ISD.
The information on the type (absence/presence) of the proof and the particular ISD it is relevant to will be encoded in the subject, in the format:
_[ISD_NAME]._[ABS|PRE].example.com
The verification of a presence proof is to be carried out by the client - it will be integrated in rdig when the proofs reach a stable binary format.
As part of the implementation effort for the End Entity PKI, a new assertion with "CTProof" type was created. The assertion will contain absence or presence proofs for a certain ISD. The information on the type (absence/presence) of the proof and the particular ISD it is relevant to will be encoded in the subject, in the format:
_[ISD_NAME]._[ABS|PRE].example.com
The verification of a presence proof is to be carried out by the client - it will be integrated in rdig when the proofs reach a stable binary format.
This change is