On 03/02/2015 06:50 PM, Brian E Carpenter wrote:
so you're mollified if somebody's cert says "hi i'm 1232345245213452345...@lkajsdlfjasdfds.clasjdflakjsdfk.ladsjflakjsfdls.xxx" instead? the possession of a cert does nothing in and of itself to make an enrollment decision. No, of course not. That is the whole point of using draft-pritikin-anima-bootstrapping-keyinfra or an equivalent.
The point being that enrollment decisions have very little to do with the name binding claimed by some third party, especially when the name binding itself in a zero/littleconf most likely has little/no meaning to the enrollor (ie, [email protected]).
It's hardly news that I'm biased against certs, but the biggest reason is that people impute in them superpowers which only get in the way of discussing the actual problems.
Mike _______________________________________________ homenet mailing list [email protected] https://www.ietf.org/mailman/listinfo/homenet
