Leif Johansson wrote:
Won't a typed blob of some sort neatly solve all of the issues around certificate types? I'm asking because a typed blob will also have other nice properties such as isolation between a tam "engine" and plugins dealing with individual certificate types.
At the syntactic level, yes. But I suspect we need to think more about what's in some blob variants, in particular x.509 blobs and I guess PGP blobs. That process might lead to some other fields in PDUs or not, but we need to think it through in any case, S.