Subject: [pkix] Browser enrollments and ASN.1

From: Anders Rundgren <[email-masked]>
Date: Wed, 13 Apr 2011 21:14:29 +0200

As far as I know there are four different browser enrollment schemes:
- Netscape's <keygen>
- Microsoft's "CertEnroll"
- Mozilla's generateCRMFrequest ()
- Apple's SCEP

A common denominator is that the request is based on an ASN.1
construct of some kind.

Another common denominator is that protocol invocation is based
on all-over-the-map methods where none is using ASN.1.

Exactly where that leaves a PKIX enrollment effort is unclear to me at least.

Anders