Is the CA market broken?
Eliot Lear <lear@cisco.com> Wed, 12 June 2013 17:38 UTC
Return-Path: <ietf-http-wg-request@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69DB711E80F0 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 12 Jun 2013 10:38:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level:
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E4WnvQoYdbd7 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 12 Jun 2013 10:38:04 -0700 (PDT)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) by ietfa.amsl.com (Postfix) with ESMTP id E561421E8055 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Wed, 12 Jun 2013 10:38:03 -0700 (PDT)
Received: from lists by frink.w3.org with local (Exim 4.72) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1Umoxv-0005nD-VA for ietf-http-wg-dist@listhub.w3.org; Wed, 12 Jun 2013 17:36:11 +0000
Resent-Date: Wed, 12 Jun 2013 17:36:11 +0000
Resent-Message-Id: <E1Umoxv-0005nD-VA@frink.w3.org>
Received: from lisa.w3.org ([128.30.52.41]) by frink.w3.org with esmtp (Exim 4.72) (envelope-from <lear@cisco.com>) id 1Umoxd-0005dQ-2V for ietf-http-wg@listhub.w3.org; Wed, 12 Jun 2013 17:35:53 +0000
Received: from rcdn-iport-6.cisco.com ([173.37.86.77]) by lisa.w3.org with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16) (Exim 4.72) (envelope-from <lear@cisco.com>) id 1Umoxa-0006YT-Q8 for ietf-http-wg@w3.org; Wed, 12 Jun 2013 17:35:53 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=613; q=dns/txt; s=iport; t=1371058550; x=1372268150; h=message-id:date:from:mime-version:to:subject: content-transfer-encoding; bh=NobNXs4RmUGn8ps/MCuHgKltt2u+H7iOOqyJjhttO+w=; b=DTn+NiSXELZbYSsXHN7NOwlvgSOzZcxbhcv1PmJDZ9DnPIRytsaq5rDS SIQvPQxRTeefWHcL53tpNtqXuIrEVvHYQE+c6R2fkEtDnvV5SFsG+G45W xAVu6rJOLNn0mRUzQluswDM+lR7pbjgYAlHZ2zkK9NtcHG1aK9jeNvCiA 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AoEFAKmwuFGtJV2Z/2dsb2JhbABbgwkwgnZHvFcWdIIoJTIjNgIFFgsCCwMCAQIBSwEMCAEBEAeHcwypP5E+gSaQcIEUA5dAgSmQGYMrIA
X-IronPort-AV: E=Sophos;i="4.87,853,1363132800"; d="scan'208";a="222003169"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-6.cisco.com with ESMTP; 12 Jun 2013 17:35:24 +0000
Received: from rtp-vpn6-136.cisco.com (rtp-vpn6-136.cisco.com [10.82.248.136]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id r5CHZNuH004521 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 12 Jun 2013 17:35:24 GMT
Message-ID: <51B8B15B.8010107@cisco.com>
Date: Wed, 12 Jun 2013 13:35:23 -0400
From: Eliot Lear <lear@cisco.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130509 Thunderbird/17.0.6
MIME-Version: 1.0
To: "saag@ietf.org" <saag@ietf.org>, "ietf-http-wg@w3.org Group" <ietf-http-wg@w3.org>, Internet Architecture Board <iab@iab.org>
X-Enigmail-Version: 1.5.1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Received-SPF: pass client-ip=173.37.86.77; envelope-from=lear@cisco.com; helo=rcdn-iport-6.cisco.com
X-W3C-Hub-Spam-Status: No, score=-11.9
X-W3C-Hub-Spam-Report: AWL=0.835, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.173, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5
X-W3C-Scan-Sig: lisa.w3.org 1Umoxa-0006YT-Q8 077891f1a118127720206277b296e121
X-Original-To: ietf-http-wg@w3.org
Subject: Is the CA market broken?
Archived-At: <http://www.w3.org/mid/51B8B15B.8010107@cisco.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/18221
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>
I'd like to bring to your attention the following paper: http://weis2013.econinfosec.org/papers/AsghariWEIS2013.pdf What it says is that there is market concentration, no race to the bottom for price, and that technical solutions may be the best approach. A key callout from the talk was the conflict within the browser community between assuring security and assuring connectivity. DANE is also called out in the paper. A reminder: Cisco has an open RFP at http://www.cisco.com in the area of HTTP2, and a separate one on Internet Economics. This would be covered by either or both. Eliot
- Is the CA market broken? Eliot Lear
- Re: [saag] Is the CA market broken? Eliot Lear