Should we have separate requests for registering a server generated key and a client generated key? Pro: Cleans up the specification and schema somewhat Con: Might encourage applications to only support one mode, the idea that the client should be able to depend on the server for PKI support is somewhat weakened. Of course it may be that it only makes sense for applications to chose what they support in this instance. Server generated keys typically only make sense in the context of key recovery, an XKMS service may legitimately want to avoid any contact with signing keys. Phill Phillip Hallam-Baker FBCS C.Eng. Principal Scientist VeriSign Inc. pbaker@verisign.com 781 245 6996 x227
This archive was generated by hypermail 2.2.0+W3C-0.50 : Thursday, 20 September 2007 14:30:50 GMT