Re: [pkix] Simple Certificate Enrollment Protocol (SCEP)

Hi Peter,

Thanks for your quick answer.

The smart grid security folks want to use SCEP as normative reference in
their specification. In the current state of SCEP, this is probably against
the rules of IEC. It might be desirable to progress SCEP to a more official
status. That could be within PKIX as an RFC or as an ITU-T Recommendation to
be progressed very quickly. The latter might require some consent from
Cisco.

Regard,

Erik

-----Oprindelig meddelelse-----
Fra: pkix [mailto:pkix-bounces@ietf.org] På vegne af Peter Gutmann
Sendt: 14. oktober 2014 12:18
Til: IETF PKIX
Emne: Re: [pkix] Simple Certificate Enrollment Protocol (SCEP)

Erik Andersen <era@x500.eu> writes:
>Simple Certificate Enrollment Protocol (SCEP) (
>http://www.iec.ch/members_experts/refdocs/iec/isoiec-dir2%7Bed6.0%7Den.
>pdf) appears to be widely used and implemented although it is specified 
>in an old, expired Internet draft from 2011 that was never issued as an 
>RFC.
>
>Why was it never issued as an RFC and why should it not be on the 
>standards track?

Because it wasn't invented by PKIX.  PKIX have their own two protocols, CMP
and CMC, both of which have practically nonexistent support, and even less
interoperability.  SCEP was invented by Cisco but they're trying to disown
it in favour of another new protocol they've dreamed up with (you guessed
it) practically nonexistent support and interoperability.

Peter.
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix