Re: Considerations about the need to resume PKIX work
Anders Rundgren <[email protected]>
| Newsgroups | gmane.ietf.x509 |
|---|---|
| Message-ID | <[email protected]> |
Max, If we stick to the problem with outdated crypto algorithms, the only reasonable solution is updating keys (and software...) when needed. The latter is worked on in the IETF TEEP WG. Regarding the state of PKI, none of the PKIX enrollment protocols support MFA or key attestations. In fact, the entire PKIX WG were *against* such ideas (when raised by me) when EST was on the "drawing board". FIDO alliance products (of course) have this as a core facility. Anders _______________________________________________ pkix mailing list [email protected] https://www.ietf.org/mailman/listinfo/pkix