RE: Algorithm Selections

Regard Hal Finney's comment:

> From the security perspective, there exist deployed keys and PKIs
> and there is a desire to extend the functionality of this existing
> infrastructure to be able to secure XML documents.  From this perspective,
> it is desirable to make sure that existing keys are supported by the
> XML security specs.
>

I completely agree with the position that XML-encryption make use of
existing
and ubiquitous keys, especially keys used by PGP. In 1996, the
Department of Energy mandated that every Interstate Natural Gas Pipeline
Company use PGP to
sign/encrypt Internet E-Commerce transactions. The DOE mandate was based on
standards specified
by the Gas Industry Standards Board, Electronic Delivery Mechanism (GISB
EDM). Within the
past two years various state Public Utility Commissions have adopted the
GISB EDM standard for
Internet E-Commerce transactions within the Electric Industry.

Enron, one of the largest Energy companies in the U.S. has conducted over
$183 Billion
in Internet E-Commerce, ref:
http://www.computerworld.com/cwi/story/0,1199,NAV47_STO54149,00.html
Enron was the first company to use the GISB EDM standard for Internet
E-Commerce
in April of 1997.

As co-chairman of GISB's EDM committee I respectfully request that members
of the
XML encryption workgroup include a requirement to support PGP.

Dick Brooks (co-chair GISB EDM committee)
Group 8760
110 12th Street North
Birmingham, AL 35203
dick@8760.com
205-250-8053
Fax: 205-250-8057
http://www.8760.com/

InsideAgent - Empowering e-commerce solutions

Received on Saturday, 2 December 2000 11:49:21 UTC