Re: [dane] Call for Adoption: "Using Secure DNS to Associate Certificates with Domain Names For S/MIME"

Ref: http://tools.ietf.org/html/draft-hoffman-dane-smime-04

On 21 Sep 2012, at 19:27, Warren Kumari <warren@kumari.net> wrote:

> 
> On Sep 10, 2012, at 5:25 PM, Warren Kumari <warren@kumari.net> wrote:
> 
>> Dear WG,
>> 
>> This draft has already revived some comment (and has been revised to incorporate / address those),  so I'm assuming that there will be sufficient interest to adopt, but for the form of the thing:
>> 
>> This starts a call for adoption of draft-hoffman-dane-smime. 
>> Please provide feedback as to if you would like this draft adopted by Sept 17th, 2012.
> 
> We have discussed this, and see sufficient interest for adopting this draft -- would the authors please re-submit as draft-dane-?


On the whole, my view is that associating a public key to a user is better done by WebID http://webid.info/  ( see spec http://webid.info/spec/ ). Putting that information in the DNS misses out on a lot of other information you would like to have about a user, is difficult to read, write, and on the whole is very cumbersome. The reason for putting public keys of servers in the DNS is that servers tend not to change that much, their tend to not be that many services per domain, etc...

There are proposals of using the WebID public keys for MIME on the WebID community group.

Henry

> 
> W
> 
>> 
>> W
>> 
>> -- 
>> Never criticize a man till you've walked a mile in his shoes.  Then if he didn't like what you've said, he's a mile away and barefoot. 
>> 
>> 
>> 
> 
> _______________________________________________
> dane mailing list
> dane@ietf.org
> https://www.ietf.org/mailman/listinfo/dane

Social Web Architect
http://bblfish.net/

Received on Tuesday, 25 September 2012 07:50:59 UTC