RE: [pki-lowercosts] [Fwd: OASIS PKI Action Plan ?]

["Skyberg, David" <dskyberg@rsasecurity.com>]

Hi folks,
I think it is fairly important to maintain a vendor neutral position.  I
appreciate what Sead is offering, but acting on this at all puts us in an
awkward position.  If we publicize the availability, do we have an
obligation to publish all vendor offerings?  It's a bit of a slippery slope.

I would suggest that we continue on with the current plan of developing a
cost model and eliciting industry responses to our cost model survey.  

This is also in keeping with the current implementation plan.  Our goal is
to develop a cost model and survey, poll for responses, and propose updates
to the PKI Action Plan based on our findings.  I would suggest that
deviation from that to any large degree should be approved by the TC anyway.

-DS

> -----Original Message-----
> From: Steve Hanna [mailto:Steve.Hanna@Sun.COM]
> Sent: Tuesday, June 22, 2004 5:57 AM
> To: Ross Smith
> Cc: PKI Lower Costs
> Subject: Re: [pki-lowercosts] [Fwd: OASIS PKI Action Plan ?]
> 
> Ross Smith wrote:
>  > I'm a little puzzled (and out of touch). What
>  > would be the purpose of buying the software?
> 
> Ross,
> 
> I'm also not clear on this. I think that
> Sead is suggesting that the SETECS software
> could offer an inexpensive alternative to
> CA and other PKI software from other vendors.
> He hopes that the TC could somehow extend this
> offer to a wider audience.
> 
> I don't think the Lower Costs SC has decided
> yet which costs it will focus on and how.
> At some point in the future, the SC might
> decide that the SETECS offer is important
> and should be publicized. But first I think
> the SC needs to understand the cost model
> and decide where to focus its efforts. Also,
> I suspect that the SC and the TC will want
> to avoid favoring any one vendor.
> 
> However, I promised Sead that I would
> pass on his offer. If the Lower Costs SC
> does not want to act on his offer now,
> I will pass this on to him.
> 
> Thanks,
> 
> Steve
> 
> Ross Smith wrote:
> > Good morning Steve.  I'm a little puzzled (and out of touch).  What
> would be the purpose of buying the software?
> >
> > Ross
> >
> > Ross F. Smith
> > Technical Advisor | Conseiller Technique
> > Technology & Security Strategy
> > Strategic Infrastructure Services / Services stratégiques
> d'infrastructure
> > Information Technology Services Branch / Direction générale des services
> d'infotechnologie
> > PWGSC / TPSGC
> > Ottawa, Canada K1A 0R5
> > 613-946-7735 | Ross.Smith@pwgsc.gc.ca | facsimile/télécopieur 613-946-
> 9893
> >
> >  -----Original Message-----
> > From: 	Steve Hanna [mailto:Steve.Hanna@Sun.COM]
> > Sent:	Friday, June 18, 2004 5:06 PM
> > To:	PKI Lower Costs
> > Subject:	[pki-lowercosts] [Fwd: OASIS PKI Action Plan ?]
> >
> > Sead Muftic has offered his company's CA software
> > and Java libraries to the PKI TC on some reduced
> > price basis. Do we want to pursue this now or
> > should we continue with our current efforts to
> > develop a PKI cost model? I told him I would
> > ask the Lower Costs SC.
> >
> > Thanks,
> >
> > Steve
> >
> > -------- Original Message --------
> > Subject: OASIS PKI Action Plan ?
> > Date: Wed, 09 Jun 2004 10:56:05 -0400
> > From: Sead Muftic <sead.muftic@setecs.com>
> > To: Steve.Hanna@Sun.COM
> >
> > Steve:
> >
> > Can you please update me what is happening with the PKI Action Plan.
> > Where ever you come, people say "We will use Microsoft's CA Server
> > and Active Directory". We (SETECS) are willing to provide CA server
> > combined with your iPlanet, which is functionally equivalent to
> Microsoft's
> > products, but technically superior.
> >
> > Can we move on to some broader deployment through the OASIS PKI WG ?
> >
> > Regards,
> >
> > Sead Muftic
> > President/CEO
> > SETECS, Inc.
> >
> >
> >
> >
> >

smime.p7s