Best Practices

[Robert J. Hansen]

On 12/13/2010 12:23 PM, Daniel Kahn Gillmor wrote:
> Avoiding a systemic change to the certificate format seems like it would
> be a Good Thing in that people could participate in a global smooth
> transition, without requiring a hard cut-over or a global interruption
> of existing networks of identity verification.

*What* hard cut-over or interruption of existing networks?  The v3/v4
transition was seamless because there was neither a cut-over date nor an
interruption: people migrated at their own pace, when they were ready
to, and not before.  v3 keys are still used today, although they're
increasingly niche.

v4/v5 will coexist the same as v3/v4 coexist.  In fact, it's quite
likely v3 and v5 will coexist.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5598 bytes
Desc: S/MIME Cryptographic Signature
URL: </pipermail/attachments/20101213/e6da1018/attachment-0001.bin>