[KEYPROV] Standardization effort: Public Keys in JSON

Anders Rundgren <anders.rundgren@telia.com> Sun, 14 November 2010 13:59 UTC

Return-Path: <anders.rundgren@telia.com>
X-Original-To: keyprov@core3.amsl.com
Delivered-To: keyprov@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 27C693A6962 for <keyprov@core3.amsl.com>; Sun, 14 Nov 2010 05:59:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.473
X-Spam-Level:
X-Spam-Status: No, score=-2.473 tagged_above=-999 required=5 tests=[AWL=-0.363, BAYES_05=-1.11, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bc62buqYBn73 for <keyprov@core3.amsl.com>; Sun, 14 Nov 2010 05:59:15 -0800 (PST)
Received: from smtp-out21.han.skanova.net (smtp-out21.han.skanova.net [195.67.226.208]) by core3.amsl.com (Postfix) with ESMTP id D0DD53A6A46 for <keyprov@ietf.org>; Sun, 14 Nov 2010 05:59:13 -0800 (PST)
Received: from [192.168.0.201] (81.232.45.215) by smtp-out21.han.skanova.net (8.5.124.10) (authenticated as u36408181) id 4C7E106501D5F277; Sun, 14 Nov 2010 14:59:51 +0100
Message-ID: <4CDFEB56.9010704@telia.com>
Date: Sun, 14 Nov 2010 14:59:50 +0100
From: Anders Rundgren <anders.rundgren@telia.com>
User-Agent: Thunderbird 2.0.0.23 (X11/20090817)
MIME-Version: 1.0
To: KEYPROV <keyprov@ietf.org>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: [KEYPROV] Standardization effort: Public Keys in JSON
X-BeenThere: keyprov@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "Provisioning of Symmetric Keys \(keyprov\)" <keyprov.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/keyprov>, <mailto:keyprov-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/keyprov>
List-Post: <mailto:keyprov@ietf.org>
List-Help: <mailto:keyprov-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/keyprov>, <mailto:keyprov-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 14 Nov 2010 13:59:21 -0000

Apparently the research branches of Microsoft and Google have begun losing
faith in X.509 as well as in XML for large-scale deployments on the web:

http://self-issued.info/?p=390

Personally, I do not see how a format can change the basic issues that much.

Sometimes I get feeling that people are getting desperate of the [admittedly]
limited progress in this space but fail to see that this is mainly due to the
fact that you need to get a much wider bunch of people on board than your
average security standard effort requires like:

- Browser developers
- Platform architects
- Hardware device vendors and experts
- Usability connoisseurs
- Privacy advocates (well....)
- Protocol designers
- Product managers
- Potential users

If you multiply this list by N number of fierce competitors, obsessed with IPR
and powered by NIH, it pretty easy to see that it is a lost case from day #1.

That doesn't imply that nothing will ever happen; something will surely happen
but it won't be through traditional standardization processes because these have
proven [over and over again] to not "deliver".

Anders