On 3/20/19 8:25 AM, Dave Crocker wrote:
well, mime uses IANA for registering types, and that's certainly a centralized operation...
True.However there is a distinct difference in a central numbering authority verses a central certificate authority. The former has little impact on system security (presuming that everyone agrees / uses the same value for things) compared to the latter, which has significant impact on security.
We can also operate without said central numbering authority if we all agree that specific things are specific values. We can't (effectively) operate without central certificate authorities. At least not given our current operating model at the scale that we operate ate.
-- Grant. . . . unix || die
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
