Re: [keyassure] publishing the public key

On 15 Feb 2011, at 02:35, Paul Wouters wrote:

> On Tue, 15 Feb 2011, Peter Gutmann wrote:
> 
>>> The public key's type and raw blob will be obtained from DNSSEC, so this is
>>> no longer required to be conveyed to the client from the server via a PKIX
>>> certificate or other ASN.1 structures.
>> 
>> But what format is the "type and raw blob" in?  You need some way of encoding
>> it, and if it's not the standard ASN.1 format what are you going to use?
> 
> I'm not sure I understand your question. The key would encoded in DNS, likely in a
> format similar to DNSKEY.

Or you just put the key info in ASN.1 format (Abstract Syntax Notation 1). ASN.1 
is just like XML in this respect - both are syntaxes.  Instead of URIs for namespaces 
they use  registered numbers. And  there is part of the X509 tree of information
a subtree for describing public keys. Just take that subtree.  

I don't know where that is defined though, though I think I came across it last
year.

Henry

> 
> Paul
> _______________________________________________
> keyassure mailing list
> keyassure@ietf.org
> https://www.ietf.org/mailman/listinfo/keyassure

Social Web Architect
http://bblfish.net/