Subject: [Sipping] draft-ietf-sipping-certs-01 - private key copy

From: "Pdut, Yaron \(Yaron\)" <[email-masked]>
Date: Fri, 11 Mar 2005 17:01:28 +0200

Cullen,

I do not like the fact that the private key for a users certificate is copied.  Even though it is encrypted in the Certificate Management Service, this architecture allows the private key to be used from multiple places - significantly increasing the possibility of compromise.

It is OK publishing a users certificate to a trusted repository, e.g. the Certificate Management Service, but I would oppose storing and encrypted private key there as well.  The UA loses control over their private key.

Yaron

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use [email-masked] for questions on current sip
Use [email-masked] for new developments of core SIP