[kitten] PKCROSS

[Nico Williams <[e-mail]>]

I note this text in the current charter:

  Prepare a standards-track protocol to solve the use cases addressed
        by draft-hotz-kx509-01 including new support for digital
        signatures.

The thought occurs that Kerberos + kx509 + PKINIT can be a sort of
PKCROSS.  That makes me very interested.  It shouldn't be very
difficult to build that almost entirely out of off-the-shelf protocol
pieces.  It's not trival though: we'd definitely need policy for
handling PKIX trust paths, and it wouldn't minimize the need for PK
crypto.

PKCROSS -or similar- is not in-charter at this time.

Just a thought,

Nico
--