Summary
Useful PKI profiles stable and implemented by mid-2000
- PKIX, IKE, S/MIME others………..
- Better cross-certification semantics and certificate path processing supported by mainstream products
Useable general purpose long-lived IC cards by mid-2000
Pilots dead…..production emerges
- most products PKI aware, if not fully enabled, by end 2000
- new life in Kerberos with PKINIT via Windows 2000
More focus on PKI enabling other security “transports” and connectors
PKI a foundation increasingly hidden by services provided by TTPs and/or TSPs:
- Entitlements brokering
- Time stamping and Notarization
- Credential mapping
- Accuracy brokering