-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 8/22/12 10:23 PM, Hill, Brad wrote:
>> Brad, do you include the use of PKIX certificates in application 
>> technologies like IMAP, LDAP, NETCONF, SIP, SMTP, SNMP, Syslog,
>> and XMPP as part of or derivative from "the Web PKI"? The
>> proposed charter seems tightly focused on browsers and HTTPS, but
>> (as documented in RFC 6125) there's plenty of implementation and 
>> deployment of PKIX certificates outside that space.
> 
> Good questions.  They are closer cousins than the offline use
> cases. My follow up questions would be:
> 
> a) Is there the same perceived need to document the "state of 
> interop" for these uses of PKIX as there is for HTTPS?

I think there is for some of those technologies. In any case, admins
who are requesting certificates for email or IM servers interact with
the very same CAs as admins who are requesting certificates for web
servers. I'd hate to see misalignment creep in because we're
deliberately excluded everything but the web.

> b) Are the right experts and stakeholders here

Well, "here" was just created, and created with "web" in the name.
Turning it around, have the folks who are initiating this effort
reached out to any other application communities?

> and interested in tackling any/some/all of these as part of this
> proposed WG?

I'm here (heavily involved in XMPP) and given that I co-authored RFC
6125 I'm pretty interested in the general topic.

> c) Will those people commit to edit and contribute to the relevant
> deliverables?

No idea, since they're not here yet.

> d) Does that work depend on or build directly from the HTTPS work,
> or are there other WGs where it can be undertaken on its own
> timeline and where the "right people" are already assembled?

I think some of the work for other application technologies is
parallel to the HTTPS work, and some of it is downstream. We'll need
to get down to cases and see exactly what work applies more generally
and what work is specific to particular technologies.

Peter

- -- 
Peter Saint-Andre
https://stpeter.im/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlA2RUIACgkQNL8k5A2w/vx2KQCg460hWsvw/hkVx2hGD/SrfnVU
ebcAn0rrbwErOIBkmaYoTOKHqOSnXMrP
=U+iW
-----END PGP SIGNATURE-----
_______________________________________________
wpkops mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/wpkops

Reply via email to