Re: [imi] Philosophical questions

[John Bradley <jbradley@mac.com>]

I was trying to be delicate about it.  Find a silver lining and all that:)

It is what we have deployed now.  

It is a different use of certs from SSL/TLS.   I look at this as an education opportunity for the ICF.

Understanding the issues will make us better prepared.   

John B.

On 2-Apr-09, at 3:05 PM, Scott Cantor wrote:

John Bradley wrote on 2009-04-02:

I see the current rules as having some advantages in a lot of cases.

I don't really see them as positive at all, but it's moot in terms of your
question.

I think there is an educational role the ICF needs to play so that

people don't fall into the potential holes.

What's being done is to literally attempt to uproot the entire security
domain model that already exists on the web, which is purely hostname-based,
so yeah, +1 on somebody needing to explain all this.

-- Scott



---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php

smime.p7s