Best Practices

[David Shaw]

On Dec 13, 2010, at 4:40 PM, Daniel Kahn Gillmor wrote:

> On 12/13/2010 01:13 PM, David Shaw wrote:
>> Why is it that using the method you advocate, there is a graceful
>> changeover between fingerprint formats, but a change in the
>> certificate format requires a "hard cut-over" with "global
>> interruption of existing networks..." ?
> 
> I was assuming that new certificates come with new keys, and that new
> keys could not certify or be certified by existing (old) certificates.
> 
> Are v3 keys able to certify or be certified by v4 certificates?

Sure, in both directions.

David