RE: PKCS 7/10 Security Issues

[Carlisle Adams <carlisle.adams@xxxxxxxxxxx>]

Mike,

>----------
>From: 	mmyers@verisign.com[SMTP:mmyers@verisign.com]
>Sent: 	Thursday, September 11, 1997 11:34 AM
>To: 	Carlisle Adams
>Cc: 	'ietf-pkix@tandem.com'
>Subject: 	RE: PKCS 7/10 Security Issues
>
>Carlisle--
>
>In any case, I've read through your
>comments and arrive at different interpretations of the requirements and
>the essential issues surrounding them.

"Different interpretations" is putting it fairly mildly  --  on some of
these issues I don't think we're understanding each other at all...  

However, it is probably not productive to continue this thread until
there is something concrete to talk about.  As soon as we all have in
front of us a new PKCS #7 (*), a new PKCS #10, and a new 7/10
certificate management proposal, we'll begin these discussions again and
see if we can all progress to a solution with acceptable security and
generality.

Fair enough?


(*) Again, as I said in Munich, this is *not* PKCS #7 v2; this is some
other version of PKCS #7 that adequately addresses the bootstrapping
requirements.



--------------------------------------------
Carlisle Adams
Entrust Technologies
cadams@entrust.com
--------------------------------------------