What is the status of the OpenPGP draft?
I've been asked to speak at an Identity
conference and while I was musing on the
unsuitability of x.509/PKI for identity,
it occurred to me that one of the barriers
is that OpenPGP is not a standard, whereas
x.509 is.
Institutions put great store on standards
(rightly or wrongly). Also, the "PGP" name
is considered somewhat to be loony in many
staid quarters. It would be thus doubly
good to have a completed spec, so that we
could say that a system conformed to RFC
2440, an internet identity architecture
standard.
(With all the normal marketing caveats of
course!)
iang