Re: About HTTP authentication and usernames

I have looked at several different ways of solving this matter, and the
Thawte way of using an assigned OID extension seems to be the most
elagant. This way the same username on a personal certificate can be used
for authentication with other services as well, which may not accept
usernames outside the interpretation of what's commonly assumed, i.e.,
other services may not accept usernames like user@domain.com or a full
Subject DN. The Subject DN also can default to whatever it wants to be
regardless of the extension.

For your reference, for anyone else facing this situation, IANA offers a
free registration service for object identifiers --
http://www.iana.org/cgi-bin/enterprise.pl

I still want to hear opinions of people on the list.

Mukund

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Jul 28 12:47:01 2003