RE: Issue: Server/Client key generation

Although I prefer the flatter structure with regard to avoiding Types, I
think that in this case, since we have a choice between either client or
server generated, I like the way it is defined now (i.e. as a choice within
a single register request).  (If we chose the other option, we'd have to
have two Reissue request elements as well, which I'd prefer not to do.)

Mike

-----Original Message-----
From: Hallam-Baker, Phillip [mailto:pbaker@verisign.com]
Sent: Tuesday, March 05, 2002 1:39 PM
To: www-xkms@w3.org
Subject: Issue: Server/Client key generation



Should we have separate requests for registering a server generated key and
a client generated key?

Pro: Cleans up the specification and schema somewhat

Con: Might encourage applications to only support one mode, the idea that
the client should be able to depend on the server for PKI support is
somewhat weakened.

Of course it may be that it only makes sense for applications to chose what
they support in this instance. Server generated keys typically only make
sense in the context of key recovery, an XKMS service may legitimately want
to avoid any contact with signing keys.


		Phill


Phillip Hallam-Baker FBCS C.Eng.
Principal Scientist
VeriSign Inc.
pbaker@verisign.com
781 245 6996 x227