[Specs-cx] Binding X.509 subject to /Contract/Party/@id

nara hideki hdknr at ic-tact.co.jp
Tue Apr 20 06:08:43 UTC 2010


Hi, experts.

I think that there should be rules for binding X.509 subject used to
sign a contract to /Contract/Party/@id.

Two ways came to my mind :

1.  XRD/XRDS discovered for /Contract/Party/@id MUST be signed with
same certificate used to sign contracts.
2.  X.509 should be has a property for the Party/@id.

There could be more or better ones.

Any idea welcome.

Thanks.
---
hdknr


More information about the Specs-cx mailing list