RE: RSA mandatory for PKIX CMP?!

[John Marchioni <johnmarc@xxxxxxxxxx>]

So Verisign is "... committed to supporting other digital signature standards as market demand materializes for alternatives."

Consider PGP's installed base--which I think is on the order of 3 to 4 million users, and the fact that PGP now supports DSS and Diffie-Hellman, and PGP will also support the import and export of X.509 certificates; this seems to indicate that there is more than adequate market demand for, not to mention some pretty good business (couldn't resist the pun) in DSA certificates.  Does Verisign consider DSA to be on your alternative-standard-candidate list at all?

We seem to have digressed on this thread--my apologies to the PKIX DL.

- John

-----Original Message-----
From:	Peter Williams [SMTP:peter@verisign.com]
Sent:	Tuesday, July 08, 1997 3:40 PM
To:	John Marchioni
Cc:	Charles Breed; ietf-pkix@tandem.com
Subject:	Re: RSA mandatory for PKIX CMP?!

John Marchioni wrote:

> Peter -
>
> Are you hinting that if PGP responds "Yes" then Verisign may start
> issuing DSA certificates?  Now that would be a major event!
>
> - John

John,

VeriSign's position has been consistent for over 12 months: see

https://www.verisign.com/repository/CPS1.2/CPSCH2.HTM section 2.1.2.


Peter.