Re: [xmpp] Questions on POSH (WAS: Fwd: I-D Action: draft-miller-xmpp-dnssec-prooftype-03.txt]

Hi,

for 'us webhosts' I believe that DNSSEC is the way forward for secure federation.

It's simple and straight forward for us and customers.

If you want secure federation, get DNSSEC enabled on your domain. Done.

My 2 cents.

Florian

On 13 Feb 2013, at 16:40, Peter Saint-Andre <stpeter@stpeter.im> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 2/13/13 8:45 AM, Matt Miller (mamille2) wrote:
> 
>> If POSH doesn't work for you, then I guess you don't deploy it.
> 
> Exactly. The idea behind DNA is that we have a "framework" for proving
> the validity of a server-to-server connection, with (initially) three
> different prooftypes:
> 
> 1. PKI (RFC 6120 / RFC 6125)
> 
> 2. DNSSEC (draft-miller-xmpp-dnssec-prooftype)
> 
> 3. POSH (draft-miller-xmpp-posh-prooftype)
> 
> Simon / Florian, we'd appreciate your feedback on the whole system
> here. Is one of those prooftypes deployable? Maybe two in some
> circumstances or for some customers? Matt and I added POSH to the mix
> because of difficulties with PKI and DNSSEC in many scenarios. Our
> hope is that, for hosting providers and customers who care about
> having secure s2s connections, at least one of the prooftypes would
> work. If that's not the case, then we might need to think about
> defining additional prooftypes (possibilities include some kind of
> ticket system a la OAuth, TLS with PGP as in RFC 6091, and other
> things that might or might not be easy to implement to deploy either).
> But we'll want to make sure that in any given deployment scenario at
> least one of the prooftypes is a reasonable approach.
> 
> Peter
> 
> - -- 
> Peter Saint-Andre
> https://stpeter.im/
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> 
> iQIcBAEBAgAGBQJRG8H7AAoJEOoGpJErxa2pxpwQAKR4jXvopHo8pS8vvWk3dVB3
> 2/cJIoEhQjc+OvopFg17ck8T8azErE29cctWfnztocPV+63K4tsSepDI14MnkzoC
> HqwHOx7MnZpud6VBpvlHErpyT3S6Ch9AFjrBgodP7fG34JrOUe5ikWhz1XtJII86
> 2en0sfIe5QnYhJqF3+F8GoaimcUXK21EG3x5sM3gKswXLt5uBhFW5zk9mE1PlUOK
> lRJWZHSCCceUv/Ry//e07hIblog+vsY59q9rRHjlsLpeGbzoZ+OBLbtixQh1fLuf
> XzZYNDSyKs/p2p9w9iOqw7RuefqDa8jKe2l2wSwqY77WWWe2V+lbeCHI6XlH4j2/
> 0p7hyFsRWshne6h1b4xx5d905MaWViuIDCS+WHo35umQDoD6pAsRZHpK2QgCCzyp
> 6EU1XBPyToNQMpU/JeeYWM3OP2TQ4UzpFaySDk+OD+4uV9e5evCaY6YiA5kUkF06
> cr6vAZYNn17qn3k29MEA2GLW0LJwVtG3vrdKU2wBYZcXTMJIgDmiZa+vlLUYUV03
> yVrLLcl/DHvW4ekLgzFaSh5nGbxlAAFmq32RmcwmH89ltTFTnJBVaTnf3C8sHr5j
> M/RNpfY3vFPAqeFui/9tOf3TGqN/AXJ7hHRLd8COm2IQKu6P/AdIK5Bnnn8CeJsH
> dkPaZvsgtt7HWpNGeRZ7
> =sdvF
> -----END PGP SIGNATURE-----
> _______________________________________________
> xmpp mailing list
> xmpp@ietf.org
> https://www.ietf.org/mailman/listinfo/xmpp

Re: [xmpp] Questions on POSH (WAS: Fwd: I-D Action: draft-miller-xmpp-dnssec-prooftype-03.txt]

Attachment: smime.p7s