Re: [saag] Or grow a real PKI (Re: SHA-1 to SHA-n transition)

["Hallam-Baker, Phillip" <[e-mail]>]

We already went through that phase. Early in the life of PKI there was a whole slew of state regulation. At one point there was an entire wall in the practices group covered in certification and accreditation plaques.

None of it had any real effect.

These are hard problems that governments have difficulty with as well. It was a government inquiry that started my thinking on this topic.


Regulation is a government tool, it is rarely a government objective in its own right.


-----Original Message-----
From: Stephen Kent [mailto:[e-mail]]
Sent: Tue 3/3/2009 1:53 PM
To: Hallam-Baker, Phillip
Cc: Nicolas Williams; [e-mail]
Subject: Re: [saag] Or grow a real PKI (Re:  SHA-1 to SHA-n transition)
 
At 9:04 AM -0800 3/3/09, Hallam-Baker, Phillip wrote:
>Content-class: urn:content-classes:message
>Content-Type: multipart/alternative;
>	boundary="----_=_NextPart_001_01C99C22.4DD0C516"
>
>Governments can regulate PKIs to be employed for government purposes.
>

A government can regulate CAs that operate in its country, for ANY 
purpose, if so desires.

But, I already noted that this outcome is likely in the U.S. or the EU.

Steve