Re: [pkix] possible new pkix and/or smime work

[Stephen Farrell <[e-mail]>]

On 24/03/16 13:28, Anders Rundgren wrote:
> 
> How do you anticipate that S/MIME certificates are distributed?

Not via web browsers using TLS client auth. Changing the topic
entirely and almost at random isn't useful.

And in general, it's not useful for this discussion to wander
(it's wandered enough). If you Anders want to propose some
relevant new work, please write an I-D. (Same goes for anyone.)

In case it isn't clear to you or the list - as an AD I will not be
proposing to the IESG or IETF that we spin up a new WG to boil
any oceans, not a PKI ocean, nor an SMIME ocean, nor any other.

If there are specific bits of sensible work that folks are willing
to make the effort on, and if those seem likely to be implemented and
deployed then I'll be positive.

But I am just not interested in helping with random discussion of
principles, possibilities, all the things that are wrong with the
world or angels on the head of pins.

So to re-iterate (just in case more emphasis is needed:-) - if you
want something substantively discussed, write an I-D that is relevant
to the ex-PKIX or ex-SMIME WGs and come up with good-enough answers
as to how your stuff is likely to get implemented and deployed.

Cheers,
S.



> On smart cards?  Well, then we are talking about a more scoped
> scenario which (for example) eliminates Yahoo! from the plot.