1. EEMA’s pki Challenge Paul Green – VeriSign and pkiC testing participant

2. What was it? EEMA project funded by EU Commission (and Swiss Government) –Information Society Technology programme Establish a common framework for secure e- commerce –PKI technologies –Certificate Service Providers including CA –Security enabled applications

3. Who tested?

4. Testing issues Manual enrolment vs on-line processes –Not many products support automated processes Subject key Identifiers –Different lengths and algorithm implementations Distinguished Name components –Too many acceptable options and little common ground OCSP signing certificate –Two valid methods, not always supported

5. Implications on standards Existing IETF/W3C standards are very complex –EESSI standards add further complexity –Complexity equals higher vendor costs, and customer confusion Stringent profiling of all standards –Greater level of detail, including examples Directory services are a major interoperability issue –DIT structures need to have greater standard definition

6. Further information www.eema.org/pki-challenge Final report and findings to be launched at InfoSecurity Europe – 29 April – 1 May Future Work = best practice papers: –Best Practice for Users –Implementation of practices for vendors –Industry associations support