Re: [Moderator Action] Missing items in KeyUsage

If the KeyUsage means key usage OIDs at IANA

it is mentioned at Web Certificate API Specification (
http://mountielee.github.com/webcertapi/webcertapi.html) which is not yet
deliverable.

I agree KeyUsage is important in certificate area.

and I feel discussion of certificate issues are just now started.

regards
mountie.



On Tue, Apr 2, 2013 at 6:42 AM, Wendy Seltzer <wseltzer@w3.org> wrote:

>
>
>
> -------- Original Message --------
> Subject: [Moderator Action] Missing items in KeyUsage
> Date: Sat, 30 Mar 2013 15:18:17 +0000
> From: Jim Schaad <ietf@augustcellars.com>
> To: <public-webcrypto@w3.org>
>
> This may have already been covered in the past, I have not read all of the
> history yet, but there are a couple of things that I noticed about the
> KeyUsage enumeration that I found off.
>
> 1.  There may be a desire to separate the idea of encrypt/decrypt between
> data and keys.  This leads to better separation of usage for key wrap items
>
> 2.  There may be a need to have a signOnce key usage as well.  If one is
> looking at creating an encrypt/decrypt only public key, one may still want
> to tag it as being able to do a single signature operation for the purposes
> of obtaining a certificate by signing a PKCS#10, CMC or CMP message.
>
> 3.  The current set of key usages does not have a key agreement usage.
>  What
> is the current view of how Diffie-Hellman keys are marked?  They are not
> actually encrypt/decrypt keys.
>
> Jim
>
>
>
>
>
>
>
>
>


-- 
Mountie Lee

PayGate
CTO, CISSP
Tel : +82 2 2140 2700
E-Mail : mountie@paygate.net

=======================================
PayGate Inc.
THE STANDARD FOR ONLINE PAYMENT
for Korea, Japan, China, and the World