RE: [Fed-Talk] Change in Cert Validation in 10.6.4?
RE: [Fed-Talk] Change in Cert Validation in 10.6.4?
- Subject: RE: [Fed-Talk] Change in Cert Validation in 10.6.4?
- From: "Miller, Timothy J." <email@hidden>
- Date: Wed, 30 Jun 2010 15:31:30 -0400
- Acceptlanguage: en-US
- Thread-topic: [Fed-Talk] Change in Cert Validation in 10.6.4?
Except that the "ID ecosystem" is just as complex; it's just *differently* complex. Kim Cameron has some valuable ideas, but the notion that multiple independent token services attempting to trade attributes about entities is any less complex than X.509 with cross certification is just bunk.
-- Tim
>-----Original Message-----
>From: fed-talk-bounces+tmiller=email@hidden [mailto:fed-
>talk-bounces+tmiller=email@hidden] On Behalf Of Beck, Keith
>M CDR ACNO NGEN, OPNAV N099
>Sent: Wednesday, June 30, 2010 2:12 PM
>To: Henry B. Hotz
>Cc: Apple Fed Talk
>Subject: RE: [Fed-Talk] Change in Cert Validation in 10.6.4?
>
>If you read the use cases, I think simplicity is a major driver behind
>the Identity Ecosystem http://www.dhs.gov/xlibrary/assets/ns_tic.pdf
>
>Keith
>
>-----Original Message-----
>From: Henry B. Hotz [mailto:email@hidden]
>Sent: Tuesday, June 29, 2010 16:19
>To: Disiena, Ridley J. (GRC-VO00)[DB Consulting Group,Inc.]
>Cc: Apple Fed Talk
>Subject: Re: [Fed-Talk] Change in Cert Validation in 10.6.4?
>
>...
>On the US Gov't side I wish that the whole PKI infrastructure weren't so
>complex. While I don't see a specific flaw here, it seems like we're
>asking for trouble.
>...
> _______________________________________________
>Do not post admin requests to the list. They will be ignored.
>Fed-talk mailing list (email@hidden)
>Help/Unsubscribe/Update your Subscription:
>
>This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden