[Previous] [Next] [Index]
[Thread]
Re: Re- Hierarchies and Webs of
>The "hierarchical approach" you are referring to is that used by PEM, based on
>X.509. This builds on a lot of structure to constrain what you refer to as
>"transitivity".
Yes, classic PEM depended on Internet-wide X.500 deployment. And as
a result it is for all intents and purposes dead. The only "life" being
shown in the mailing list is for MOSS, which is a Mime use of PEM headers
and algorithms to implement PGP-style trust model.
As for other comments (nedbob?): yes, if every CA cross-certifies then
you've got a web, but there is no requirement. Just becuase the two *can*
be isomorphs doesn't mean they will be.
/r$
Follow-Ups: