On Sunday, Apr 20, 2003, at 14:15 US/Eastern, Hallam-Baker, Phillip
wrote:
Fifteen years of trying to deploy PKI through the edge model.
[...]
I am not aware of any Internet service the IETF has succeffully
deployed while I have been involved with it. Not one thing.
The Web was successful before the IETF was involved and largely
in spite of IETF dogma.
Need more proof?
IPSEC - Has failed in its design niche, currently losing
ground to SSL based VPNs which work better through
NAT
DNSSEC - Still a theory
IPv6 - Still a theory
Hmm. I use IPSec-based VPN every day, and it works fine via my cheap
NAT box without my having to do any reconfiguration at all. I've never
seen an SSL-based VPN system.
I've also not seen any use of PKI, bar certificates on web sites for
SSL.
I think this must be one of those "your reality may vary" deals.
mathew
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg