<...>
> There was no evidence presented that this is a common industry problem,
> but rather a single anecdote of a particular individual - that is
> certainly not the basis for creating a new standard. Quantifying this
> assertion for the industry may produce adequate justification for a new
> standard, but a single isolated experience does not IMHO meet the
> minimum bar of justification.
I think Stephen provided a credible argument earlier (the
only-30%-of-alexa-top-1M-use-tls argument).
<...>
> I actually think Max is making the opposite argument - that the proposal
> is "anti CA" (or maybe anti X.509) and "pro DANE" and asking for
> justification of why we want to move away from the current
> implementation base to an unproven trust model that extremely few have
> demonstrated a willingness to adopt at this point.
OK so that makes even less sense to me. How is creating another CA anti-CA?
Cheers Leif
_______________________________________________
Acme mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/acme