Is the CA market broken?

I'd like to bring to your attention the following paper:

http://weis2013.econinfosec.org/papers/AsghariWEIS2013.pdf

What it says is that there is market concentration, no race to the
bottom for price, and that technical solutions may be the best
approach.  A key callout from the talk was the conflict within the
browser community between assuring security and assuring connectivity.

DANE is also called out in the paper.

A reminder: Cisco has an open RFP at http://www.cisco.com in the area of
HTTP2, and a separate one on Internet Economics.  This would be covered
by either or both.

Eliot

Received on Wednesday, 12 June 2013 17:35:53 UTC