Re: [TLS] Review of draft-ietf-tls-openpgp-keys-08

On 5/16/06, Pasi.Eronen@nokia.com <Pasi.Eronen@nokia.com> wrote:

> All this ("typical way" etc, "might be signed by tens", ..) seems to
> indicate that usually a single certificate is enough, but there may
> be situations where several would be useful. In other words, the
> situation is not that different from X.509, and we should keep the
> Certificate payload as a list...

Indeed there are situations were a list might do, but there are also situations
where a graph would be better, or just a single one might do. The idea in this
draft is to keep the key exchange separate from any local verification policy.
If one wants to use the web of trust, he can use it. If somebody else
wants to use
openpgp keys the same way as PKIX certificates, he can also use the
current draft.
In all cases unknown keys are retrieved via a key server or by other means.

That approach follows the way openpgp keys are used in electronic mail
and I see no good reason to change it by introducing an openpgp key
chain in this draft.

regards,
Nikos

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls