Subject: Re: [Netconf] implementing: [draft-ietf-netconf-rfc5539bis-05]

From: Randy Presuhn <[email-masked]>
Date: Wed, 2 Apr 2014 09:52:43 -0700 (GMT-07:00)

Hi -

>From: Radek Krejčí <[email-masked]>
>Sent: Apr 2, 2014 5:53 AM
>To: Kent Watsen <[email-masked]>, "Bajpai, Vaibhav" <[email-masked]>, "[email-masked]" <[email-masked]>
>Subject: Re: [Netconf] implementing: [draft-ietf-netconf-rfc5539bis-05]
...
>just asking if someone is willing to explicitly describe configuration
>(data model?) for a client side. Specifically the configuration how the
>server certificate is supposed to be validated (chain-of-trust, list of
>trusted server certificates/keys,...). Personally, I don't think that
>this is necessary.
...

In light of the revelations about compromised CAs, I think
this is an important concern and its configuration should
not be implementation-specific.

Randy