[All Lists] [By Thread] [By Date] [Previous] [Next]
From: Devorah
Subject: What does certification prove?
Date: 14 Tishrei 5782
For my implementation:
The certificate contains a policy reference. The policy document defines what was required. The relying party decides whether that policy is sufficient for their purposes.
My API returns:
1. Signature valid: yes/no 2. Issuer: (the authority) 3. Policy: (what was required) 4. Subject: (who completed it)
I do not return "is kosher" or "is Jewish" or "is trustworthy." I return what the certificate actually claims. Interpretation is the caller's responsibility.
Thread: