Re: [id-cloud] Gap Analysis Use Case 23: Cloud Application Identification using Extended Validation Certificates

[Anil Saldhana <Anil.Saldhana@redhat.com>]

During the last TC meeting, we had a gap analysis discussion on this use 
case.

A question I had is about how EV certs would handle the following situation:
* There is a public cloud provider (X).  Now an organization Y hosts 
applications in the public cloud.  If certificates are issued to domain 
Y (such as a.Y.com,b.Y.com)  that resolve to hosted applications in the 
public cloud,  how will EV certs take into account that the DNS is 
resolving to a public cloud provider's network?

Any of the PKI experts have insights?

On 02/05/2012 11:36 PM, Gershon Janssen wrote:
> ---
>
> This discussion thread is to start an on-list discussion on the Gap Analysis
> of individual use cases. Use case numbers refer to the use cases as
> described in the 'OASIS Identity in the Cloud TC Use Cases' Version 1.0,
> Working Draft 02, 15 December 2011, which is available at
> http://www.oasis-open.org/committees/document.php?document_id=44915&wg_abbre
> v=id-cloud
>
> The information below describes the current state. You are invited to
> respond on-list to this thread with any comments, insights, additions, etc.
> All input will be gathered from the list and consolidated into the next
> revision of the Gap Analysis document.
>
> ---
>
> Use Case 23: Cloud Application Identification using Extended Validation
> Certificates
>
> Short description:
> Shows the value of providing validatable identification of the Cloud
> Provider/SaaS application to the user or consumer using Extended Validation
> (EV) certificates.
>
> Relevant applicable standards:
> -	SAML
>
> Analysis notes:
>
> Possible GAPs identified:
>
> ---