Re: [Sip] comments on draft-kupwade-sip-iba-00

[Eric Rescorla <ekr at networkresonance.com>]

At Wed, 27 Feb 2008 09:14:26 -0800 (PST),
Harsh Kupwade wrote:
> 
> [1  <text/plain; iso-8859-1 (8bit)>]
> What if the trust anchors are not complied into your client? Then
> verifying a digital signature is not a trivial problem.
>
>   Cross certificate validation is a challenging issue?

Which is why nobody does it in practice in the private sector.

In any case, I'm not sure why we're having this discusion since
all the same trust issues apply to IBE schemes. The only respect
in which they don't apply to IBE schemes is if you have a single
global KG, but of course you could have a single global CA,
too. It's just that nobody wants to do either.

-Ekr



_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors at cs.columbia.edu for questions on current sip
Use sipping at ietf.org for new developments on the application of sip