[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
XML in PKIX. Was: OCSP-X vs SCVP
RE: OCSP-X vs SCVPKhaja,
<snip>
>The XML community I am referring to and am aware of is a group of financial institutions.
>(There may be others) These financial institutions have a group of application and solution
> developers within their ranks who (most of them) know and love XML. They prefer to avoid
>dealing with ASN.1. This XML community finds it easier to read, deal with and encode
>information in XML. They are able to debug protocol implementation problems where XML
>encoding is used. They know and are comfortable with XMLDSIG and use that rather than
>PKCS#7 to send signed transactions back and forth. They have plans to use delegated path
>validation so they will not be doing PKIX section 6.1 stuff locally. They want to increasingly move
>towards a set of protocols that use XML encoding for these reasons.
I would say that this statement is valid for the e-business sector in general.
According to some notable persons on this list, XML-encoded systems are not
the target for PKIX as it is based on ISO-standards which currently are ASN.1-based.
Steve K et al: Is'nt time to "adjust" the scope of PKIX and make the "X" not only refer
to "X"500 but to "X"ML?
<snip>
Regards
Anders