Re: draft-ietf-pkix-scvp-32.txt

[Stephen Kent <kent@xxxxxxx>]

Title: Re: draft-ietf-pkix-scvp-32.txt

At 4:36 PM +0200 7/7/07, Anders Rundgren wrote:

> Although
> probably not NIST's intentions with SCVP, I would not be surprised if
> SCVP long-term will put the final nail in the Bridge CA
> coffin.
> Off-loaded validation is a MUCH better concept since it is fully
> dynamic, allows arbitrary granularity down to individual EE
> certificates, and most of all does not rely on a centrally
> funded/trusted "über-CA".  In fact, a successful
> rollout of SCVP will probably eliminate most other uses of
> cross-certification as well.
> Anders

David asked a question about HTTP use in SCVP, for which this is NOT an answer.

Try to keep on topic.

Steve