Re: [pkix] SCEP vs CMC vs CMP

[max pritikin <[e-mail]>]

re: SCEP

I wasn't involved in the full history of SCEP but my understanding is that a lot of these things you ask about were addressed ---- in the CMC document. Ideally SCEP would have gone away naturally but that didn't happen. I believe the reasons are 'water under the bridge' ... but what we should address now is an existing SCEP document that is widely implemented and the continued confusion.

I currently have the edit token for SCEP and I have been responsive to all requests for edits or clarifications. If you have clarifications about the text describing the existing and widely implemented version(s) of SCEP please feel free to send them to me. Unfortunately the more updates and changes the more it appears to be an active document.

Personally I'd prefer to finalize it "as is" and address improvements and modern requirements in a new document. 

- max

On Mar 21, 2011, at 7:02 PM, Peter Gutmann wrote:

> max pritikin <[e-mail]> writes:
> 
>> Regarding SCEP: I'd like to see this document published and finalized in a
>> way that accurately reflects its current role so we can move forward.
> 
> <grumble>I'd like to see it incorporate some of the feedback that's been
> submitted for it, e.g. consistency problems with hash algorithm use, removing
> MD5 and DES (!!!) as the mandatory algorithms, switching from the decade-old
> PKCS #7 to the current CMS, and a pile of other stuff that's been requested
> over time but ignored by the authors</grumble>.
> 
> Peter.