Re: Trust Models [Re: Perhaps OS

The difference with the X9F1 standards is whose trusted (uncertified) public
key you have (IPRA or TLCA in PEM, or your own CA in X9F1).  In our model the
IPRA would be certified by the PCAs who would be certified by their CAs.  We
will likely add text about the PEM model, since it is useful in some of our
environments ("domains").
 
/ Rich