<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
<br> whats new is the tone.<BR> <BR>For years (1989-1994) certs for open systems launguished in any form, the butt of many an IETF joke (the thing that the then DARPA folks wanted to ensure never worked, or took off, as the US agencies fought their strange internal ITU-T vs DARPA/IETF protocol battles.) Then the tone changed. It was a very American change (and that's meant as a compliment) as silicon valley needed something (right there for the picking).<BR> <BR>20 years later, we can note that the hated client cert for https client authn has been in reprieve from negative messaging for about 2 years now (just about how long ago the first round of "secret" openid meetings started, with the US Federal government). Recently, they have even gone from "no hope " (but at least no negative campaining) to "ahem" - a modality that perhaps has value. What interesting is the coordination of the messaging. Someone is rehabilitiating the client cert (and even trying to rehabilitate the term "PKI")<BR> <BR>Let's not look a opportunity too harshly. Sometime, you put things back on the technology shelf and wait - till they get pulled off again (just as the right moment). if this is the moment, then good. (Another American compliment.) But, ask why? (always). Its crypto (a war of nerves). Strike the right balance (as somehow we all did for the last 20 years), there are happy mediums to be found so crypto (the munition) does something useful in civilian world (without being the instrument of big brother) and without being too off-putting to folks in the spying or policing business.<BR> <BR>I find myself where I was at the OUTSET (not the conclusion) of the mandatory key escrow debate, a decade ago. I was open-minded. I became closed only once I saw the *means* being used to "swamp" dissenters from a position already agreed in private, established in a certain forum populated by folks running the military R&D networks (and their closed, international coordination forums). Once the means used became nasty and personalized (like a victorian backroom blackballing club), I came to the conclusion that mandoryiness could never be trusted - being merely first step of a wedge. Which was a shame, and probably set public key back about, well, a decade - i.e. till now.<BR> <BR>But, we are 10 year later. The cold was is even colder than ever. Some of the folks who ran it, and were still using cold war "management" techniques 10-20 years ago, are out of the picture. I dont mind crypto conservativeness (getting ever older, myself); what I care about is tone of global leadership, and whether the apparent tone is just a PR campaign: the dulcit tones of the avuncular diplomat masking the contractor desperate to stick a gun in your face, snarling to remind you of "your place". <BR> <BR>On the other hand, if things are just "right timed" (and client certs get a second chance), then so be it.<BR> <BR>Interesting times. I smell change, Eddy.<BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR><div><div id="SkyDrivePlaceholder"></div><hr id="stopSpelling">Date: Sat, 11 Feb 2012 19:14:10 +0200<br>From: eddy_nigg@startcom.org<br>To: openid-general@lists.openid.net<br>Subject: Re: [OpenID] OpenID Providers Invited to Join in an NSTIC Pilot Proposal<br><br>
<meta name="Generator" content="Microsoft SafeHTML">
<br>
On 02/11/2012 01:58 AM, From Francisco Corella:
<blockquote cite="mid:1328918283.55920.YahooMailNeo@web125506.mail.ne1.yahoo.com">
<div style="color: rgb(0, 0, 0); font-family: times
new roman, new york, times, serif; font-size: 12pt; background-color: rgb(255, 255, 255);">FYI:<br>
<a href="http://pomcor.com/2012/02/10/openid-providers-invited-to-join-in-an-nstic-pilot-proposal/" target="_blank">http://pomcor.com/2012/02/10/openid-providers-invited-to-join-in-an-nstic-pilot-proposal/</a><br>
</div>
</blockquote>
<br>
Without offending, but what's the news? StartCom (and maybe some
others) do this already for years: <a class="ecxmoz-txt-link-freetext" href="https://www.startssl.com/?app=14" target="_blank">https://www.startssl.com/?app=14</a><br>
<br>
A pilot for something that works in production already for years? Or
am I missing something?<br>
<br>
<div class="ecxmoz-signature">
<table border="0" cellSpacing="0" cellPadding="0">
<tbody>
<tr>
<td colSpan="2">Regards </td>
</tr>
<tr>
<td colSpan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org" target="_blank">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a target="_blank">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org" target="_blank">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg" target="_blank">Follow Me</a></td>
</tr>
<tr>
<td colSpan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
<br>_______________________________________________
general mailing list
general@lists.openid.net
http://lists.openid.net/mailman/listinfo/openid-general</div> </div></body>
</html>