To:
Greg Hudson <ghudson@MIT.EDU>
Cc:
Keith Moore <moore@cs.utk.edu>, keydist@cafax.se
From:
Randy Bush <randy@psg.com>
Date:
Wed, 09 Jan 2002 21:14:48 -0800
Sender:
owner-keydist@cafax.se
Subject:
Re: RESCAP/RC: an alternative to key distribution using DNS
> (I am perfectly happy with a referral to another protocol, as long as > that referral includes something--even something as small as a key > fingerprint--which can allow DNSSEC trust to be chained onto application > keys. folk have suggested that, if you like certs with fqdns in them, and you trust the cert signing hierarchy to put that fqdn in one and only one cert, ... randy