Re: [keyassure] publishing the public key

[Paul Wouters <[e-mail]>]

On Mon, 14 Feb 2011, Paul Hoffman wrote:

>> Why does TLS service have to send cert/cert chain?
>
> Because that is what is required by the TLS standard. We should not be trying 
> to modify the TLS spec in this WG.

I understand, but there IS a relationship here. With DANE, you have an
alternative to PKIX-TLS. So such a change would affect TLS, but would
require DANE. Similarly, the TLS group could say "we won't add bare
public key because there is no validation for it" and they'd send me
back to DANE.

So please don't call bare public key out of scope yet.

Paul