Ben,
because the constrained chains begin somewhere below the TA, which leaves
EVERY
TA free to create ANY subordinate CA. Also, ccTLDs represent the sort of
sovereign alignment to a PKI that many folks find attractive.
For exactly the reason many find it unattractive :-)
I am not a fan of viewing the Internet as an extra-national entity.
Maybe that makes me a heretic WRT Google's idea of cyberspace and
reality ;-) .
Countries have a right to manage a lot of things within their borders,
and managing their DNS name spaces seems quite reasonable.
Steve
_______________________________________________
perpass mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/perpass
