Subject: [AAA-WG]: Issue 16: Redirect Server Certificates

From: Pat Calhoun <[email-masked]>
Date: Tue, 10 Jul 2001 13:05:23 -0700

All,

Following the suggestion I sent to the list before leaving for
vacation, I am proposing adding the following paragraph to
section 3.2 of the CMS security draft:

"  For multiple Diameter servers within a domain that share a public key,
   each server's identity is encoded in the subjectAltName extension. This
   allows any server within a domain to decrypt AVPs intended for that
   domain."

Comments welcome,

PatC