[saag] PKIX report

[Stephen Kent <[e-mail]>]

PKIX met for about an hour, on Wednesday morning, with about out 30 attendees.

A quick doc status review:
	- 3 new RFCs: 5934, 6024, & 6025
	- 2 in IESG (1 about to begin IETF LC)
	- 4 in the WG: CMC Updates, 5280 clarifications, OCSP update
	    and transport protocols for CMP

The OCSP update doc is essentially done, and we elected to defer a 
couple of issues until we begin work on OCSP-bis.

We decided to issue a new doc defining SMIME Capabilities for signature
alg parameters, to address an OCSP alg agility requirement.

We also had a presentation on an I-D from the SIDR WG, which 
describes another approach to local management of trust anchors. The 
mechanism described
here is somewhat complex, because of the need to accommodate the path 
validation rules of RFC 3779. (The Resoure PKI, developed in the SIDR 
WG, makes use of 3779 extensions, and thus the complexity is needed 
in that context).  However, the basic notion of re-issuing proffered 
TAs under an RP-controlled TA, may of general utility.