skronk

[Perry E. Metzger]

Kipp E.B. Hickman says:
> Har! Besides the certificate problems, are there other problems with
> PEM that have prevented its adoption?

Its kind of ugly, too. The new PEM-MIME stuff should do much better,
but its no longer really PEM per se. Look at the drafts if you are
interested. 

> > I don't really blame you much.  I mean TIPEM handles all the X.509
> > stuff just fine and PGP can't get out even the simplest of libraries,
> > or even a partial library.
> 
> Our implementation supports this X.509 stuff as well. We don't have a
> DUA yet though...

Just so you know, Kipp, there is no real support for X.500 directories
over the internet, and there never will be. No one likes the things
outside of fogeys in MIS departments who program in Cobol.
Certificates as currently envisioned by the IETF are probably
going to be stored in the DNS.

.pm