Practicalities of Deployment (1)
Many companies starting again with pilots they started 1-2 years ago
Now is a good time to start a real implementation with technology maturing
Turns out PKI deployment is quite hard
- difficult to integrate
- limited certificate chain traversal
- limited tools for cross-certification management
- uncertain semantics e.g. adding a new root
- limited integration with end applications
- standards still evolving
- need to work closely with vendors committed to standards