Issue: Server/Client key generation

Should we have separate requests for registering a server generated key and
a client generated key?

Pro: Cleans up the specification and schema somewhat

Con: Might encourage applications to only support one mode, the idea that
the client should be able to depend on the server for PKI support is
somewhat weakened.

Of course it may be that it only makes sense for applications to chose what
they support in this instance. Server generated keys typically only make
sense in the context of key recovery, an XKMS service may legitimately want
to avoid any contact with signing keys.


		Phill


Phillip Hallam-Baker FBCS C.Eng.
Principal Scientist
VeriSign Inc.
pbaker@verisign.com
781 245 6996 x227