The developers need a home to discuss, advance etc. Would it be acceptable
to have this PEM-centric forum located in W3C, versus IETF? AS IETF has
kind of "done with" PEM (with a certain amount of disillusionment
and its replacement with the totally revised MOSS),
Well I'm not sure that we would want the PEM spec here either. First W3C
is not a standards body in the same maner as the IETF. While the W3C charter
allows it to declare a standard the preferred route is to work through the
IETF, ISO etc.
The PEM RFC was proposed standard and probably heading towards historical if it
isn't already there. That is probably a good place for it since MOSS and S/MIME
apear to be the best candidates in the standards field while PGP is something
of
a law unto itself.
There is interesting work going on in the PKIX group which may be a usefull
place to put in a backwards compatibility note on how PEM messages should be
handled. I suspect however that since the main failing of PEM was that people
could not accept the key management system envisioned that it is more likely to
be a strip down of the existing PEM rather than a continued development.
Phill