No, Sec. 1.1.1 of RFC 5652 (which you are quoting) only describes the 
differences between the original PKCS #7 v1.5 and RFC 2630. There follow a few 
more sections with other bells and whistles leading to RFC 5652.

Besides, even if the later RFCs are (mostly) *backward compatible* with RFC 
2315, they may still be adding useful stuff. This is just speculation on my 
part, not actual knowledge.

Thanks,
        Yaron

> -----Original Message-----
> From: Tero Kivinen [mailto:kivi...@iki.fi]
> Sent: Wednesday, November 25, 2009 14:01
> To: Yaron Sheffer
> Cc: IPsecme WG
> Subject: Re: [IPsec] #118: Reference for PKCS #7
> 
> Yaron Sheffer writes:
> > Russ later pointed out that there are multiple RFCs defining PKCS
> > #7. Inputs on current implementations are welcome.
> >
> > PKCS#7  should reference RFC 2315<http://tools.ietf.org/html/rfc2315>.
> 
> I think the two options is either RFC5652 (latest CMS) or RFC2315
> (original PKCS#7). All other of the rfcs have been obsoleted by the
> RFC5652.
> 
> I do not know enough of the later CMS versions, but RFC2630 says that
> it should be backward compatible with RFC2315 expect where it was
> changed to "accommodate attribute certificate transfer and key
> agreement techniques for key management".
> 
> As I do not think we need any of those in IKEv2, I think it is enough
> to refer to the RFC2315.
> --
> kivi...@iki.fi
> 
> Scanned by Check Point Total Security Gateway.
_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec

Reply via email to