Thanks to Sajjad for bringing this to our knowledge, however if you read the CPS of this PKI established at QAU-NCP Islamabad, many of the controls have "No Stipulation", they have no key escrow arrangement, no up-time guarantees, no BCP guarantees, no OCSP and no root key protection under-writings.
The CPS also adds the disclaimer: "The PK-Grid-CA will issue certificates to entities, which are based and/or having offices in Pakistan, and are intended for cross-organizational sharing of resources. The focus of these organizations should also be in research and/or education."
In conclusion, this PKI is a great initiative taken long before NIFT but it does not compare to the features of NIFT which carries far less risk and root key protection is under-written by VeriSign PKI (now owned by Symantec). Users (even if they belong to research or education organizations) should use the services of the QAU-NCP PKI CA with full knowledge of the prevalent risks, as I have identified above.
Regards,
Kamran Meer
On Thu, Jan 26, 2012 at 11:10 PM, Sajjad asghar <sa4_79@yahoo.com> wrote:
Natioanl center for physics has a PKI setup with the name of Pk-GRID CA ,it was established in 2004 long before NIFT. Here is website of the PK-Grid CABest RegardsSajjad Asghar
From: Javed Naushahi <jnaushahi@yahoo.com>
To: "pakgrid@yahoogroups.com" <pakgrid@yahoogroups.com>; "ammar@brain.net.pk" <ammar@brain.net.pk>
Sent: Wednesday, January 25, 2012 2:51:24 AM
Subject: [pakgrid] Re: PKI in Pakistan
Dear Jafferi saheb,Do we have moe PKIs / CAs operating in the country in Education or Govt. sector?, other than e-NIFT.Is there any plan to launch low cost PKI, with decades of experience under your belt in e-security.Regards,Javed NaushahiFrom: "ammar@brain.net.pk" <ammar@brain.net.pk>
To: pakgrid@yahoogroups.com
Sent: Thursday, January 19, 2012 8:46 AM
Subject: Re: [pakgrid] URDU Content on Web
Dear Rauf Sb,
This is totally not-for-profit activity and not funded by any
organization. ( For E-Village Project ). All information is public and can
be shared with anyone interseted to get it.
Information provided by few friends has been of great help but as you all
know this is a big job and I would request all those who can help may
provide the required information.
Regards,
Ammar Jaffri
__._,_.___
.
__,_._,___
No comments:
Post a Comment