Re: Evaluation: draft-ietf-pilc-link-design - Advice for Internet Subnetwork Designers to BCP

[Patrik Fältström <paf@cisco.com>]

On torsdag, mar 6, 2003, at 22:50 Europe/Stockholm, Russ Housley wrote:

> In my opinion, the Thawte web of trust makes X.509 certificates just 
> as easy to use a PGP.  This is a step in the right direction, but it 
> still keeps it to the techies.  We want it to MUCH easier to use than 
> that.
Regarding X.509, I have only used the openssl application and tried to 
manage self-signed certificates for ssl (including creating certs 
injected in Netscape and IE).

Saying it was hard is an understatement.

So, of course also the applications being used MUST be made as simple 
as the PGP software.

openssl might be a good engine to use...

  paf