Re: [DNSOP] [pkix] Cert Enumeration and Key Assurance With DNSSEC

2010-10-01 Thread Phillip Hallam-Baker
On Fri, Oct 1, 2010 at 6:05 PM, Matt McCutchen wrote: > On Fri, 2010-10-01 at 11:29 -0400, Phillip Hallam-Baker wrote: > > In particular I am very concerned about the particular approach being > > taken to security policy. What the proposers are attempting to do is > > to create a mechanism that a

Re: [DNSOP] [pkix] Cert Enumeration and Key Assurance With DNSSEC

2010-10-01 Thread Matt McCutchen
On Fri, 2010-10-01 at 11:29 -0400, Phillip Hallam-Baker wrote: > In particular I am very concerned about the particular approach being > taken to security policy. What the proposers are attempting to do is > to create a mechanism that allows a site that only uses one particular > high assurance CA