[Nfd-dev] NDNCert

[Dehart, John]

Zhiyi,

Something that would be helpful for me to understand the NDNCert protocol and 
how it will operate is if we could have a detailed walkthrough of an example of
how it would work on the NDN Testbed.

 I envision it would be something like this but I am probably missing parts or have some
things wrong:

1. Create root self-signed cert on UCLA node.
2. Run Root NDN Testbed CA on UCLA node using root self signed cert
3. On each NDN Testbed node:
     a. Create node prefix based ndnsec key pair
     b. Request cert from Root NDN Testbed CA at UCLA
     c. Run node prefix based CA for this nodes namespace
4. Users wanting a cert within an NDN Testbed node's namespace request it from that node’ CA

Given that kind of scenario, what would be the protocol messages, challenges, email exchanges, etc
that would be required.

This may not fit into todays conf call but it would be something to have before we are ready to 
deploy on the NDN Testbed.

John