Presentation on theme: "January 6, 1999Common Solutions Group1 X.509 University Michael R. Gettes Princeton University Computing & Information Technology."— Presentation transcript:
January 6, 1999Common Solutions Group1 X.509 University Michael R. Gettes Princeton University Computing & Information Technology Collaboration Svcs Group (CSG), Mgr
January 6, 1999Common Solutions Group2 Collaboration Svcs Group (CSG) and Mailing Lists Directory Services (LDAP, CSO, NIS) NetNews Security Infra (Kerberos, Certificates) Document Management (print/fax, imaging) Calendaring Development and SysAdmin functions
January 6, 1999Common Solutions Group3 X.509 Princeton University Summer 1997 –Local Considerations –Entrust v. Others –Netscape Certificate Server –Secure using Certificates –Servers and Users Decision on University Policy Future?
January 6, 1999Common Solutions Group4 Summer 1997 What MIT had done as seen at Spring CSG! How to do it for Princeton? Investigation of current offerings –Entrust vs. Verisign vs. RollYourOwn Inc. Entrust and others –Cost is prohibitive ($700,000) Netscape Certificate Server
January 6, 1999Common Solutions Group5 Netscape Certificate Server https://ca.Princeton.EDU Informix Database Management Easy Administrative Interface VGI for automatic verification –Kerberos authentication (SSL protected) IE poorly supported until recently LDAP Integration but No Key Escrow FREE!!!(at the time)
January 6, 1999Common Solutions Group6 Secure User Impact With Netscape and IE/Outlook –Sophisticated Users could endure –Size of messages –Impact on University business SSL for Servers –That’s the easy part
January 6, 1999Common Solutions Group7 University Policy February, 1998 –Cabinet issues policy regarding key escrow –University business must be able to recover critical communications and transactions –CIT cannot support secure until key escrow is available –Recommendation to departments as well
January 6, 1999Common Solutions Group8 Future? Netscape Certificate Server –Will support Key Escrow –How much will it cost? (< $1/certificate) –Will users be able to use it? –To PGP or not to PGP Cost is the driving force –Entrust is makes deal for 11 million certs for about $1.1 million (with Canadian gov’t)???