Subject: [Ace] draft-mehrtens-core-ace-concert-00

From: "Hannes Tschofenig" <[email-masked]>
Date: Mon, 24 Feb 2014 12:27:36 +0100

Hi Hauke,

I have read your document with interest. New certificate formats are always a popular topic to discuss:

a) How do you expect this structure to be used? It guess you assume that a new extensions be defined for DTLS/TLS.

b) Have you looked at the improvements you gain with this approach? Many of the X.509 certificate fields are optional anyway. You swap the ASN.1 encoding with a different encoding (the CBOR).

c) Using IPv4/IPv6 address as the SubjectName appears wrong to me. I would have assumed that you either have a URI (for the server-side) or the MAC address

Ciao

Hannes