Re: [IETF-PKIX] Certificate Directories and Spam

[ajaber@xxxxxxxxxxxx]

> I would like to hear other opinions.  Does anyone else think this
> problem may discourage people allowing their certs to be publicly
> posted?  Have the email or directory working groups discussed this
> issue?

     Certs has to be made available to those who need them to
     do what they were intended to do.  To achieve this availability
     without making public important information like E-mail addresses
     and personal details is the challenge here.

     Making certs publicly available is not a security issue in
     the conventional sense, any average E-mail user who subscribes
     to a an ISP will tell you that they do not want their E-mail
     boxes filled with Junk and porno E-mail every day.

     As long as there is no Law to Stop unwanted harassing E-mail
     from spammers the solution SHOULD come Engineering i.e
     "do not provide spammers with lists of E-mail addresses
     posted publicly for FREE".

> Hal

Adel Jaber/Certicom Corp