Re: [pkng] Some more wacky ideas... Usability ?

[Leif Johansson <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Peter Saint-Andre wrote:
> On 11/13/09 1:09 AM, Massimiliano Pala wrote:
> 
>> as we have seen the need for
>> isolated PKIs to federate (most of the time AFTER they have
>> been deployed), I would suggest investigating (and I am totally
>> volunteering for this) mechanisms to integrate existing and
>> future infrastructures. In more details, I was thinking about
>> using Peer-2-peer technologies to provide a sort of PKNG
>> overlay network for secure communication between PK-nodes
>> (more for CAs nodes rather than End Entities nodes - for
>> usability and ease-of-deployment considerations).
> 
> Forgive me for being an IM guy, but when it comes to personal trust

Thats ok, somebody has to :-)

> online, for many people the buddy list is the center of the universe. I
> like the idea of person to person trust because it could be represented
> or instantiated in the buddy list, and that would feel natural to a lot
> of people. The idea of the buddy list could be extended to application
> servers, CAs, and other such entities (in fact we have been exploring
> that in the Jabber community for incident reporting between servers).
> 

Incidentally, buddy-lists _is_ the way a lot of SAML identity
federations are build today - using SAML metadata to represent the
list of entities in your ring(s) of trust (entities being services, not
people in this case). The challenge is scaling the buddy-list (or
white-list) to 1000s of entities and beyond. Also the KARP trust model
is exactly a buddy-list too.

Maybe we'll be building something that can both exposed as an online
service - perhaps a mix of CA and OCSP - and something where the
messages of that protocol can be useful outside the context of any
protocol interaction.

	Cheers Leif
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEUEARECAAYFAkr/KSYACgkQ8Jx8FtbMZndTXQCgom4hEVdxpClLrhdDZTYmq4aR
oxYAmPSdwzkVZppPUxM+XBlvuu6Hq4Y=
=tQzx
-----END PGP SIGNATURE-----