[Help-gnutls] Re: Is gnutls using the shell model or the chain model for a certificate validation

[Nikos Mavrogiannopoulos]

Simon Josefsson wrote:

> I think using the RFC 5280 algorithm won't be a bad choice.  At least
> you can point at the RFC authors when someone discovers a logical flaw
> in it. ;)

Only for a logical flaw. Implementation flaw is much more easy on an
algorithm like that.

regards,
Nikos