Re: [saag] IETF 93 Agenda Request - Key Discovery

[Viktor Dukhovni <[e-mail]>]

On Thu, Jul 16, 2015 at 12:20:49PM -0600, ? Matt Miller wrote:

> I would like to request a 10 minute slot during SAAG on Thursday to
> discuss entity key discovery and <
> https://tools.ietf.org/html/draft-miller-saag-key-discovery-00 >.

Sorry, I won't be in Prague.  A few concerns:

   * Retrieval of unencrypted private keys over HTTPS seems
     rather risky (perhaps a bad precedent).  One might instead
     specify that these are to made available as PKCS#12 or similar
     objects that support passphrase encryption.  The client would
     then extract the secret keys by using local knowledge of the
     applicable passphrase.

   * Finally, I am skeptical that the WebPKI CAs are a good fit
     for key management beyond the usual web server certificates.
     Trusting all of the usual suspects to also secure public keys
     for long-term content encryption (S/MIME, ...) not just
     authentication keys for web servers should not be done lightly.

     Perhaps this is a space, where proof of control of the domain
     needs to be stronger than WebPKI DV certs.  As I see it the
     confidence in the validity of a certificate is:

	EV >> DANE >> DV

     Since EV does won't scale to provide universal coverage, this
     is a space in which HTTPS with WebPKI may be inadequate.

   * This seems to want to support public-key lookup for email
     accounts.  You're perhaps aware of the DANE WG drafts in
     this space, perhaps these should be at least mentioned.
     Do we want competing (proposed) standards in this space?

-- 
	Viktor.