On 24 October 2012 03:02, Paul Hoffman <[email protected]> wrote:
> [[ I changed the subject line because this should be discussed on the list 
> *before* the meeting. It is not a separate agenda item, yet. ]]
>
> On Oct 23, 2012, at 6:41 PM, Phillip Hallam-Baker <[email protected]> wrote:
>
>> One of the key issues as far as acceptability to CAs is concerned is impact 
>> on issue processes. In particular it has to be possible to deploy any 
>> experimental infrastructure without touching the certificate issue code.

What? Why? Are you saying CAs can't test modified issuance code?

>> I think this is going to mean that CT proofs have to end up being embedded 
>> in something other than the cert they relate to. I can't see the precert 
>> idea as viable. Transporting the CT proofs in OCSP is viable though - 
>> provided some changes are made there.

What changes?

>>
>
> _______________________________________________
> therightkey mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/therightkey
_______________________________________________
therightkey mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/therightkey

Reply via email to