Re: Global PKI on DNS?

[Michael Richardson <mcr at sandelman.ottawa.on.ca>]

>>>>> "Franck" == Franck Martin <franck at sopac.org> writes:
    Franck> I was wondering if the best system to build a global PKI wouldn't be the
    Franck> DNS system already in place?

    Franck> The root servers would share the ROOT Certificates and would sign a
    Franck> certificate to each .org .com .net .fr,... managers of this
    Franck> domains...Which in turn would use these certificates to sign sub
    Franck> domains 
    Franck> certificates...

Please see the minutes from the "siked" BOF from #53... oops, none produced.

http://www.ietf.org/ietf/02mar/siked.txt
and the mailing list at keydist at cafax.se.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr at sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [