> It's possible to restrict the minimum and maximum length of otherwise
> freeform strings with XML Schema Datatypes. It is also relatively
> trivial. It is harder to agree on a sensible maximum length, since
> there are so many reasonable choices that are driven primarily by
> preference.
Some of the strings have natural lengths:
- type, status, code, etc are enumerated
- g(SKI) and g(AKI) are an exact length
(BTW, do we *mean* g(SKI), ie, g(SHA1(public key)), or do we really just
want to put in the hex of SKI, ie, SHA1(public key), instead? The only
interesting thing about g(SKI) was that it's filesystem/URL safe.)
The remaining fields, sender, recipient, class name and the
resource_set_*, we could take one of two approaches:
- try to estimate what would be "sensible" maximums based on the
conceivable maximum number of entities involved. eg, sender, recipient,
and classname are 255 chars, resource_set_* are 4k
- make the maximums stupidly large. eg, sender, recipient, and classname
can be 1K (or 4K, or....), resource_set_* are 8k (or 16k, or....)