Re: SACRED Protocol (long!)

Magnus Nystrom <[email protected]> writes:
>On Tue, 11 Dec 2001, Marshall Rose wrote:
>>>Honestly, I don't think that work will be too onerous. C.f. with other
>>>security-related protocols that runs over http.
>>
>>hi. i think we live in different realities because i can't think of
>>any "security-related protocols that runs over http" that were done in
>>the ietf or signed-off by the iesg. in my reality, anything involving
>>any  "protocol that runs over http" gets to run the brickbat gauntlet
>>in the ietf/iesg. and speaking from experience, it's not fun...
>
>CMP, 

Every implementation I've ever seen uses that binary wrapper kludge, not HTTP.

>OCSP, 

Yup, HTTP everywhere to tunnel it through firewalls.

>CMC, S/MIME,...

That's SMTP, not HTTP :-).

The only other place I've seen which uses some HTTP transport is TSP, and even
then it's usually raw rather than with HTTP encapsulation.

Peter.