Видео

I can't not think of XKCD 927... My own personal summary is: ASN.1 is too efficient, so we replaced it with JSON. We also defined a bunch of fields that have nothing to do with building a chain of trust for authentication purposes and shoved them there, to further reduce efficiency. To be clear, I don't really like X.509, but this does not look any better: it is as extensible, so as much prone to incompatibility (that is an inherent trade-off). Replacing X.500 Distinguished Names with URLs and having well-known endpoints for certificates retrieval is of course good, but that is about it; and both problems have already been solved with (X.509) extensions and profiles. I feel the pain of re-implementing, re-debugging, re-tooling everything all over again... it's coming.

The slide at 10:54 is misleading: apart from the complex topologies, everything else is implementable via X.509 extensions. And the topology is a simple chain by-design: in the case of non-linear graphs, the questions of chain validation became the matter of interpretation; and it provides a potential to the different decisions on the trust, a greater potentital than a linear chain. It might be well so that some applications require non-linear chains: be that. But to avoid ticking other marks in the case of X.509 is either non-familiriality with the X.509 machinery, false advertisement or both. Well-known URLs are non-existent in X.509? Come on: look at the CRL distribution points and/or OCSP responder URLs. Trust marks? Hadn't you heard about extended validation extension (OID registry at cabforum.org/resources/object-registry/)? Aren't they represent the same concept? The mantra "we're not in 1988, the (IT) world had evolved since" is your belief at best. Who are you, Vladimir? The "Identity Architect"? Doubt that it means what it should mean: not the apologet of OpenID or any other technology, but the man with the clear vision and the in-and-out knowledge of the fields you're talking about.

こういう動画を公開して貰えるのはありがたい。

really great and insightful phliosophical presentation. Great work Justin.

thanks😊