Hi Russ, This bit puzzles me a lot, other bits puzzle me a little:-)
On 20/04/15 16:23, Russ Housley wrote: > The ACME WG will not duplicate work from previous IETF > certificate management efforts. If accepted, that would seem to me to nullify the entire effort. Can you explain why I'm reading it wrong? ACME absolutely will duplicate work from previous IETF certificate management efforts that have failed to get traction over the last decade and a half. That is entirely fine IMO and needs no explicit justification whatsoever since we have 15 years of crystal clear non-use, outside of niche environments. (It is true that what is now considered a niche was not so considered back then.) In fact I believe anyone who claims such duplication is a problem should be the one to provide evidence for that by documenting exactly why and at what scale. It is just not credible for us to pretend that CMC, CMP, or EST are widely used for certificate management on the public Internet. If I'm wrong there I would really love to see the evidence but absent such, duplicating bits of functionality present in current RFCs that are not at all widely used is what is needed for this effort and needs to be encouraged. I think we really ought bottom out on this aspect before chartering - it'd be dumb of us to charter an ACME WG that has to fight all the CRMF battles over again, or the ASN.1 vs. whatever issues. So I hope lots of voices chime in and say what they think. S. _______________________________________________ Acme mailing list [email protected] https://www.ietf.org/mailman/listinfo/acme
