Re: [secdir] Please review draft-ietf-capwap-protocol-specification's use of certificates

[pgut001@xxxxxxxxxxxxxxxxx (Peter Gutmann)]

As invariably happens with these things, there are a pile of off-list private
threads going on that look at this.  I thought the following comment was
rather interesting, since I'm currently responsible for stirring things up :-)
I've forwarded it with the author's permission.

Peter.

-- Snip --

Stephen Kent <kent@xxxxxxx>:

>I do not agree with the suggestion that we should back off on what
>constitutes good practice just because a specific piece of (open source)
>software has limitations in what it supports relative to the standards it
>purportedly implements.

"do not agree that we should back off ... good practice just because open
source software has limitatioms..." - Well what about PKIX's non-use of
modern ASN.1 for almost ten years due to "no freeware modern ASN.1
compiler available"?? Sigh. Talk about inconsistency.