Re: Certificate fetching for bridge CA configuration

2004-10-07 Thread Kiyoshi Watanabe
Charles, One question: Are you talking about the NIST bridge CA concept or some other variants? It is too hard to understand the diagram. With my understanding, the bridge CA is a hub between different CA domains. Thus each root CA (or principal CA) issues a cross certificate to bridge. -Kiyosh

Re: Certificate fetching for bridge CA configuration

2004-10-07 Thread Charles Cranston
In an earlier version of the diagram I had one more level of certificate between the bridge certificates and the end-user certificates, but I was trying to make it simpler. If there is one more certificate between (Bridge)QSign and (QSign)End User it could be supplied by the Q offerer. The cost he

Re: Certificate fetching for bridge CA configuration

2004-10-07 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 07 Oct 2004 15:20:52 -0400, Charles B Cranston <[EMAIL PROTECTED]> said: zben> So, this is perhaps the most simple "bridge" PKI arrangement: zben> zben> +-+---++-+---+ zben> |T| |