Re: [pkix] Managing Long-Lived CA certs

"Dr. Pala" <madwolf@openca.org> Thu, 20 July 2017 15:38 UTC

Return-Path: <madwolf@openca.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45B05131CCA for <pkix@ietfa.amsl.com>; Thu, 20 Jul 2017 08:38:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.89
X-Spam-Level:
X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_HK_NAME_DR=0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eVVCSbWTFPts for <pkix@ietfa.amsl.com>; Thu, 20 Jul 2017 08:38:35 -0700 (PDT)
Received: from mail.katezarealty.com (mail.katezarealty.com [104.168.158.213]) by ietfa.amsl.com (Postfix) with ESMTP id 9155E131CB6 for <pkix@ietf.org>; Thu, 20 Jul 2017 08:38:35 -0700 (PDT)
Received: from dhcp-8e48.meeting.ietf.org (dhcp-8e48.meeting.ietf.org [31.133.142.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.katezarealty.com (Postfix) with ESMTPSA id 16B373740F3C for <pkix@ietf.org>; Thu, 20 Jul 2017 11:38:34 -0400 (EDT)
To: pkix@ietf.org
References: <467c8936-f6aa-0853-878c-24fc8803c599@openca.org> <001501d2ff0e$00eddfa0$02c99ee0$@x500.eu> <1500348690922.69356@cs.auckland.ac.nz> <27d212b4-c5a6-19d1-2afd-f18adaf21031@nist.gov> <1500387403338.42595@cs.auckland.ac.nz> <a6c8cee5-2577-c680-c61e-d3fa819d31ea@nist.gov> <1500391529591.47499@cs.auckland.ac.nz> <1500416769.24548519@apps.rackspace.com>
From: "Dr. Pala" <madwolf@openca.org>
Message-ID: <35460c78-baac-b90c-6b65-60a01bebd04c@openca.org>
Date: Thu, 20 Jul 2017 17:38:33 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <1500416769.24548519@apps.rackspace.com>
Content-Type: multipart/alternative; boundary="------------789C9D02E62FEB9FC75F88C7"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/pkix/-jiZrvhurRwGKgUbQIVleUvLUpM>
Subject: Re: [pkix] Managing Long-Lived CA certs
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pkix/>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Jul 2017 15:38:37 -0000

Hi Steve,

that is a comment that definitely comes from an old PKIX-er :D I totally 
understand where you come from, but with good will we can break out of 
old habits and actually make the world a better place together :D I hope 
I can provide some inspiration for people to focus on real problems :D

Don't give up!

Cheers,
Max


On 7/19/17 12:26 AM, swilson@lockstep.com.au wrote:
>
> This is why we in PKI can't have nice things.
>
> Cheers,
>
> Steve.
>
>