>>>>> "Franck" == Franck Martin <franck@sopac.org> writes: Franck> I was wondering if the best system to build a global PKI wouldn't be the Franck> DNS system already in place? Franck> The root servers would share the ROOT Certificates and would sign a Franck> certificate to each .org .com .net .fr,... managers of this Franck> domains...Which in turn would use these certificates to sign sub Franck> domains Franck> certificates... Please see the minutes from the "siked" BOF from #53... oops, none produced. http://www.ietf.org/ietf/02mar/siked.txt and the mailing list at keydist@cafax.se. ] ON HUMILITY: to err is human. To moo, bovine. | firewalls [ ] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[ ] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[ ] panic("Just another NetBSD/notebook using, kernel hacking, security guy"); [