Re: [pkix] purpose of LDAP in PKI

Andris,

Making certificates publicly available may only be done with the 
agreement of the end-user.

There are no benefits for certificates being used for authentication or 
non repudiation, but only inconveniences: .
in particular : lack of privacy, and ability to know how many customers 
the CAs has.

Denis

>
>
>
> Quoting *Peter Gutmann <pgut001@cs.auckland.ac.nz> 
> <mailto:pgut001@cs.auckland.ac.nz>*:
>
>     Andris Berzins <pkix@inbox.lv> writes:
>
>     >What could be the reason why end user certificates should be
>     stored in LDAP
>     >by the CA and made publicly available?
>
>     There isn't one. It's (ancient) historical baggage based on
>     X.509's origins
>     in X.500, and some of the people writing the standards haven't
>     realised yet
>     that HTTP won.
>
>
>
> When I apply for ID-card having authentication and qualified signature 
> certificate on it,
> I have to checkbox whether I want my certificates to be published in LDAP.
> I get no clear answer how could I benefit from my certificates being 
> published.
>
>
>
>
>     Peter.
>     _______________________________________________
>     pkix mailing list
>     pkix@ietf.org
>     https://www.ietf.org/mailman/listinfo/pkix
>
>
>
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix