Phillip Hallam-Baker wrote: > Moving to DNSSEC, regardless of the technical model does not eliminate > the need for certificates or CAs. The purpose of EV certificates is to > re-establish the principle of accountability. I don't know what EV means, but anything human, including CA, is not infallible, which is why PKI is insecure. Is EV divine? Masataka Ohta _______________________________________________ Ietf mailing list Ietf@xxxxxxxx https://www.ietf.org/mailman/listinfo/ietf