Subject: [OAUTH-WG] Fwd: Alternative PKI Models Side Meeting

From: Hannes Tschofenig <[email-masked]>
Date: Mon, 11 Mar 2013 10:23:24 -0400

FYI: in case you are interested in that conversation. The topic about the value of TLS and the problems with the PKI have surfaced in the past on this list. 

Begin forwarded message:

> From: Hannes Tschofenig <[email-masked]>
> Date: March 5, 2013 9:19:51 AM EST
> To: [email-masked]
> Cc: Hannes Tschofenig <[email-masked]>
> Subject: Alternative PKI Models Side Meeting
> 
> Hi all,
> 
> When our security ADs scheduled the BOF on Certificate Transparency (CT) [0] in Atlanta (IETF-85), some expressed interest in continuing the discussions regarding improvements to the Web PKI. In the IAB, we have been brainstorming about holding a workshop to progress the topic, but with the announcement of the NIST workshop on Improving Trust in the Online Marketplace [1] we decided to postpone our workshop.
> 
> The upcoming IETF-86 meeting is, however, a good opportunity to discuss whether there is a need for additional investigations. In particular, we have been wondering whether the IETF community has the same level of understanding regarding the requirements, goals, and the design assumptions. The emerging evolutionary alterations to the Web PKI model -- i.e., DANE, CT, TACK, etc. -- superficially fit the model, but they alter it in subtle and interesting ways.
> 
> If you are interested in a discussion you are welcome to join our side meeting on Thursday evening (at 8pm*) in room Boca 4 (the IAB Office).
> 
> Ciao
> Hannes & JeffH
> 
> References: 
> [0] https://www.ietf.org/mailman/listinfo/therightkey
> [1] http://www.nist.gov/itl/csd/ct/ca_workshop.cfm
> 
> PS: We picked 8pm since some of you may want to stop by at the Bits-N-Bites event.