RE: PKI operators anyone?

2007-09-05 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The only way a successful PKI will be deployed is if the U.S. Government takes a "hands-off" approach. Good luck with all that. $.02, - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFG33D9q1pz9mNUZTMRAg92AKC8o

RE: PKI operators anyone?

2007-09-05 Thread Security Admin (NetSec)
"MS-PRESS recommended design guidelines for multi-tier PKI systems for validity periods are along the lines of 8 years for the root 4 years for the "policy" 2 years for the "issuing" 1 year for the issued certificate" Don't forget that Microsoft would like you to buy their OS once every five y