While it was agreed that junk certs and per-apps certs have their uses, there was also general agreement that a high degree of standardization would be very helpful in this area. Ken noted that the Feds claim to be moving to a single profile for all uses. In particular, Ken remarked, a profile with a pseudonym and URL has enough value that we should embrace it rather than remaining pure. Vendors seem to be moving toward promoting their own solutions, and away from putting much work into standardization efforts. This is a difficult project.
Authorization seems to be growing in importance.
Authorization for mobile applications is gaining mindshare over authorization more generally. Most H.323 people consider neither authentication nor authorization to be part of their realm. This led to a more general discussion of the goals of MACE with respect to authorization. Ken reported on discussions he had recently while in Europe. There is interest in DTD tags for automatic processing.