Re: [certid] draft slides for IETF 77

[Shumon Huque <[e-mail]>]

On Thu, Mar 18, 2010 at 02:05:15PM -0700, Paul Hoffman wrote:
> At 1:28 PM -0600 3/18/10, Peter Saint-Andre wrote:
> >Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms080304070605060202080805"
> >
> >I've been asked to make a presentation about our work to the PKIX WG
> >session on Monday at 15:20 Pacific. Draft slides are attached and
> >feedback is welcome -- this is mostly just an overview to get people
> >interested in reviewing the I-D and providing feedback.
> 
> In slide 3: s/PKI/PKIX. OpenPGP has its own (unspecified) PKI.
> 
> But, more importantly in slide 3: Bullets 2, 3, and 5 disagree with each other. A server is a machine; it is not a domain or a URI. A domain name is not a URI. And so on. Consider adding a bullet saying "this is known to be unclear".
> 

I think "server" here refers not to a machine or set of machines,
but to an "application service" (application server?), ie. the server
side component of a client-server protocol.

This application service can be represented in a number of different
ways: domain name, URI, SRVname, etc.

I'd just get rid of the 3rd bullet: "Domains only (no IP addresses)".
The draft isn't about domain names only, since it talks about other
identity types (although the ones mentioned usually have a domain
name component or look like one).

--Shumon.