xacml — archive

RE: [xacml] Structured names]

From: Anne Anderson <[email protected]>
To: [email protected]
Date: Fri, 20 Sep 2002 18:26:00 -0000

My problem with Bill's suggestion is that his matching syntax is not standard. We would need to spell out all sorts of things about e-mail names to fully specify "our" matching algorithm. I think the way I specified "rfc822Name-match" is good, and makes use of all the existing standards. I think "*-equal" should be understood as matching just the one name being referenced. I think "*-match" can match a hierarchy. We should define a "*-match" function for any hierarchical subject name type. We have done this for rfc822Name, x500Name, and even for xs:string (via regexp). Are there other hierarchical name types we are concerned about at this point? Anne -- Anne H. Anderson Email: [email protected] Sun Microsystems Laboratories 1 Network Drive,UBUR02-311 Tel: 781/442-0928 Burlington, MA 01803-0902 USA Fax: 781/442-1692