0.9.8 available

[Werner Koch]

"John A. Martin" <jam at jamux.com> writes:

>     Werner> 5.2.3.15. Notation Data
> 
>     Werner> 5.2.3.19. Policy URL
> 
> Are there any pointers to, or examples of, good and effective use of
> these facilities?  Do we have a good styles for notations and for
> policy documents?

Not that I know.  This thinks are just in rfc2440 because someone may
need it in the future.  Notation signatures ahve already been in the
old pgp 2 - but I don't know of any use.

One hint:  If you decide to use notaion data, please make sure to have 
names (NAME=VALUE) which won't conflict with any other names.  There
are no rules on how to choose names yet, but I think the scheme used
in the SSH protocols is is applicable:

Use a name and append a domain name over which you have full control.
For example, the GNU projec might choose:

  -N foo at gnu.org="bla bla"

If we ever come to register names we can make clear that names which
are registered will not have an at-sign.

And don't put large amount of data into these notations - view them as
meta data of a signed document.


-- 
Werner Koch at guug.de           www.openIT.de             keyid 621CC013