Need clarity on authentication-policy under certz.proto

[ManikBhasin]

Hi,

I need some clarification on authentication policy. what exactly will be send as part of rotation of AuthenticationPolicy? will it be the some sort of certificate identifier(like sha-256 signature or RDN or AKID) for issuing CA which will be allowed to sign the leaf certificate for that particular SSL profile?

Thanks,
Manik

[ManikBhasin]

@marcushines,@tomek-US can you please help here.
Thanks

[gsibaja4]

We need clarification on this policy's structure, fields and how it needs to be enforced.

[morrowc]

I think we are still debating what/if this policy is to be used...
I believe it was supposed to be a policy (in what is clearly a protobuf form, but not specifically which protobuf) about which Certificate Authorities would be accepted as signers of certificates.