Re: [certid] draft slides for IETF 77

[Peter Saint-Andre <[e-mail]>]

On 3/18/10 3:20 PM, Shumon Huque wrote:
> On Thu, Mar 18, 2010 at 02:05:15PM -0700, Paul Hoffman wrote:
>> At 1:28 PM -0600 3/18/10, Peter Saint-Andre wrote:
>>> Content-Type: multipart/signed;
>>> protocol="application/pkcs7-signature"; micalg=sha1;
>>> boundary="------------ms080304070605060202080805"
>>> 
>>> I've been asked to make a presentation about our work to the PKIX
>>> WG session on Monday at 15:20 Pacific. Draft slides are attached
>>> and feedback is welcome -- this is mostly just an overview to get
>>> people interested in reviewing the I-D and providing feedback.
>> 
>> In slide 3: s/PKI/PKIX. OpenPGP has its own (unspecified) PKI.
>> 
>> But, more importantly in slide 3: Bullets 2, 3, and 5 disagree with
>> each other. A server is a machine; it is not a domain or a URI. A
>> domain name is not a URI. And so on. Consider adding a bullet
>> saying "this is known to be unclear".
>> 
> 
> I think "server" here refers not to a machine or set of machines, but
> to an "application service" (application server?), ie. the server 
> side component of a client-server protocol.

Correct.

> This application service can be represented in a number of different 
> ways: domain name, URI, SRVname, etc.
> 
> I'd just get rid of the 3rd bullet: "Domains only (no IP
> addresses)". The draft isn't about domain names only, since it talks
> about other identity types (although the ones mentioned usually have
> a domain name component or look like one).

Right, which is why I had thought that we were strictly talking about
domain names or things that include domain names, not IP addresses.

Peter

-- 
Peter Saint-Andre
https://stpeter.im/