W3C home > Mailing lists > Public > www-xkms@w3.org > March 2002

Issue: Server/Client key generation

From: Hallam-Baker, Phillip <pbaker@verisign.com>
Date: Tue, 5 Mar 2002 10:38:36 -0800
Message-ID: <2F3EC696EAEED311BB2D009027C3F4F4058699BA@vhqpostal.verisign.com>
To: www-xkms@w3.org

Should we have separate requests for registering a server generated key and
a client generated key?

Pro: Cleans up the specification and schema somewhat

Con: Might encourage applications to only support one mode, the idea that
the client should be able to depend on the server for PKI support is
somewhat weakened.

Of course it may be that it only makes sense for applications to chose what
they support in this instance. Server generated keys typically only make
sense in the context of key recovery, an XKMS service may legitimately want
to avoid any contact with signing keys.


Phillip Hallam-Baker FBCS C.Eng.
Principal Scientist
VeriSign Inc.
781 245 6996 x227


Received on Tuesday, 5 March 2002 13:37:48 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 20:31:38 UTC