Re: Moving forward on improving HTTP's security

Thanks Stephen!

Email bookmarked for future reference. ^_^

- Greg

--
Please do not email me anything that you are not comfortable also sharing with the NSA.

On Nov 13, 2013, at 9:54 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:

> Signed PGP part
> 
> 
> On 11/13/2013 02:40 PM, Tao Effect wrote:
> > Thanks Julian,
> >
> >> I agree that there are problems with this system, but addressing
> >> those needs to happen in a different working group.
> >
> > And that would be...?
> 
> #include <standard-answer.h>
> 
> That would be one that gets chartered as a result of a
> good proposal with a reasonable liklihood of resulting
> in success both in terms of RFCs being produced and
> getting implemented and deployed, and where there are
> enough folks with relevant clue interested. (If someone
> has such a proposal feel free to contact me or Sean.)
> 
> In the meantime there is the wpkops working group [1]
> who are trying to document the current web pki and how
> that differs from e.g. RFC 5280 and who could do with
> help in that. That's not really a pre-requisite to new
> web pki developments, but it would be excellent if
> such developments were based on the deployed reality
> (with all its flaws) as a realistic starting point,
> which is what the wpkops group are trying to capture.
> 
> S.
> 
> [1] http://tools.ietf.org/wg/wpkops/
> 
> 
>