Re: Security for various IETF services

[Stephen Kent <kent@xxxxxxx>]

Ted,

The fact that, within the DNS each CA-like entity is syntactically 
constrained,
is very important. It addresses the fundamental flaw of the Web PKI, 
that was
illustrated by the DigiNotar debacle.

Steve