Re: short-lived credential issuance

> Could be.  One could also imagine a SASL-enabled version of one or more of
> the many standard certficate management protocols.  I don't know enough
> about any of them to know if one is more suitable for perversion than the
> others.

The salient fact is the "...many standard protocols..." above - I don't think
we really want to go adding yet another one. Of course, what you do in 
private is your own business, but re-inventing PKI enrollment is certainly 
not part of our charter, and probably isn't the type of activity to which 
you want to admit openly when there are PKI-types about:-)

Stephen.

-- 
____________________________________________________________
Stephen Farrell         				   
Baltimore Technologies,   tel: (direct line) +353 1 881 6716
39 Parkgate Street,                     fax: +353 1 881 7000
Dublin 8.                mailto:[email protected]
Ireland                             http://www.baltimore.com