Re: generation of private keys

[Stefan Kelm <kelm@xxxxxxxxxx>]

> After all this discussion of whether it would be possible to cope with
> a CA that doesn't do POP, it still isn't clear to me why that would be
> a USEFUL option.
>
> If it adds no value, don't do it.  Especially since it introduces a
> security hazard.
>
> Could you give an example where having a non-POP CA is a thing of
> significant value?

Well, it seems that we're drifting away from my initial suggestion. I
conclude that there's no general interest in adding an extension, right?

Cheers,

        Stefan.

______________________________________________________________________________
Stefan Kelm            PGP key: "finger kelm@www.pca.dfn.de" or via key server
DFN-PCA, University of Hamburg                               <kelm@pca.dfn.de>
Vogt-Koelln-Str. 30                               http://www.pca.dfn.de/~kelm/
22527 Hamburg (Germany)          Tel: +49 40 5494 2262 / Fax: +49 40 5494 2241