pgpticket?

sen_ml@eccosys.com sen_ml@eccosys.com
Tue, 05 Oct 1999 15:02:19 +0900


is anyone working on implementing pgpticket functionality
(e.g. library-wise, for a particular service, etc.) as described in:

http://search.ietf.org/internet-drafts/draft-moscaritolo-mione-pgpticket-03.txt

the abstract says:

   OpenPGP specifies message formats and certificate formats used for
   exchange of encrypted and/or authenticated objects. This document
   discusses methods of extending OpenPGP's message formats to support
   an authorization system. This system would use public key
   cryptography to authenticate a user to a server and establish the
   user's access permissions. The concept is that the user acquires a
   ticket signed by some issuer that specifies what they are entitled to
   do. That ticket is then submitted to a server. The server uses a
   challenge/response method to verify that the holder really has the
   matching private key. The server then allows the access specified.