> Von: Anima <[email protected]> Im Auftrag von Michael Richardson > > Fries, Steffen <[email protected]> wrote: > > Sorry for the late replay on this. There is probably one fits all > > answer for this. The reason is that the enrollment protocols are > > defined different in that respect. > > - EST does not provide it out of the box, this was the reason to have > it in > BRSKI > > - CMP provides a certificate confirmation message (certConf). > > - CMC provides a confirmation message with the Confirm Certificate > Acceptance Control > > - SCEP explicitly mentions the lack of the certificate confirmation > > message in the security consideration section > > - ACME seems to not provide it either. > > > Given that it would make sense to move it to /brski to make it > > independent from EST. > > Interesting. > So when doing CMP or CMC, would there be two confirmations?
CMP has a certConf message, but it can be omitted where BRSKI is carrying the content in enrollstatus. _______________________________________________ Anima mailing list [email protected] https://www.ietf.org/mailman/listinfo/anima
