[kictanet] Public consultation on the licensing framework for Electronic Certification Service Providers (E-ECSP)

Tue Oct 29 20:23:58 EAT 2013

Thanks Bw. Wambua for picking the point I was trying to raise. As you move forward you may need to ponder on why the law was  not "explicit" about PKI.

John Kariuki

On Tuesday, 29 October 2013, 12:54, "Wambua, Christopher" <Wambua at cck.go.ke> wrote:

John,

The establishment of the PKI is implied in Section 83C of the Act which spells out the functions of the Commission in relation to electronic transactions. In order to realize the mandate of the Commission as envisaged in the Act, the Commission would have to set up a national PKI.

The functions of the Commission as per Section 83C are as follows:
·         Facilitate electronic transactions by ensuring the use of reliable electronic records;
·         Facilitate electronic commerce and eliminate barriers to electronic commerce such as those resulting from uncertainties over writing and signature requirements;
·         Promote public confidence in the integrity and reliability of electronic records and electronic transactions;
·         Foster the development of electronic commerce through the use of electronic signatures to lend authenticity and integrity to correspondence in any electronic records;
·         Promote and facilitate efficient delivery of public sector services by means of reliable electronic records;
·         Develop sound frameworks to minimize the incidence of forged electronic records and fraud in electronic commerce and other electronic transactions.
Further, the Regulations, in Sections 3 through 19, define the PKI framework in more detail including the requirement for a licence, responsibilities of a certification service provider, issuance/renewal/suspension/revocation of certificates, obligations of a subscriber, performance audits, security guidelines and incident handling as well as winding up of operations of a certification service provider.

Christopher Wambua
Manager – Communications
Consumer and Public Affairs Department
Communications Commission of Kenya
P.O. Box 14448 NAIROBI 00800
Tel: +254 20 4242209
info at cck.go.ke
www.cck.go.ke

From:kictanet [mailto:kictanet-bounces+wambua=cck.go.ke at lists.kictanet.or.ke] On Behalf Of John Kariuki
Sent: Friday, October 25, 2013 7:16 PM
To: Wambua, Christopher
Cc: Consumer and Public Affairs; KICTAnet ICT Policy Discussions
Subject: Re: [kictanet] Public consultation on the licensing framework for Electronic Certification Service Providers (E-ECSP)

Hi Wambua,
Thanks for the information.
I notice that  you state and I quote
" In addition, the Act provides for the establishment of a framework based on Public Key Infrastructure(PKI) model." 
I have reviewed both the Act and the the corresponding regulations and I am unable to trace this reference.Please advise which sections of the Act and the regulations have this provision.

Many thanks,

John Kariuki

On Friday, 25 October 2013, 15:55, Josphat Karanja <karanjajf at gmail.com> wrote:
Hi Wambua,
Thanks for the information. 
Question is how does this initiative tie-in with the PKI project currently being undertaken by the ICT Authority?
Kind regards

Josphat

Regards
...........................................................
Josphat Karanja, 

Blog: http://mawazoyamkenya.blogspot.com/ 

On Fri, Oct 25, 2013 at 3:23 PM, Ali Hussein <ali at hussein.me.ke> wrote:
Wambua

Asante for this Information.
Ali Hussein

+254 0770 906375 / 0713 601113

"Kujikwaa si kuanguka, bali ni kwenda mbele" (To stumble is not to fall but a sign of going forward) - Swahili Proverb

Sent from my iPad

On Oct 25, 2013, at 2:29 PM, "Wambua, Christopher" <Wambua at cck.go.ke> wrote:
Listers,
> 
>As you are aware, the Kenya Information and Communications Act, Cap 411A, provides a legal framework for the provision of electronic commerce services in the country. In particular, the Act and the Electronic Certification and Domain Name Administration) Regulations, 2010, define the conditions that must be met for electronic communication to be recognized as authentic or as emanating from either a person or an institution. In addition, the Act provides for the establishment of a framework based on a Public Key Infrastructure (PKI) model.
>
>In recognition of the foregoing, CCK has developed a licensing framework for Electronic Certification Service Providers (E-CSP) to support the PKI framework and which will subsequently lead to an amendment of the Market Structure.
>
>CCK, therefore, wishes to invite stakeholders and members of the public to submit their comments on the proposed licensing framework for Electronic Certification Service Providers. The comments submitted will be considered for incorporation in the final documents. 
>
>The consultation paper, the draft licence and the application form are available on our website at http://www.cck.go.ke/links/consultations/current.html  and will remain open for public review and feedback between 25th October  to 25th November 2013.
>Comments/inputs may be submitted via e-certification at cck.go.ke or the address given below:
>
>Director General
>Communications Commission of Kenya
>CCK Centre Waiyaki Way, Opp. Kianda School
>P.O Box 14448 Nairobi - 00800
> 
> 
_______________________________________________
>kictanet mailing list
>kictanet at lists.kictanet.or.ke
>https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>
>Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com
>
>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT
 enabled growth and development.
>
>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or
 qualifications.

_______________________________________________
kictanet mailing list
kictanet at lists.kictanet.or.ke
https://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/karanjajf%40gmail.com

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT
 enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or
 qualifications.

_______________________________________________
kictanet mailing list
kictanet at lists.kictanet.or.ke
https://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/ngethe.kariuki2007%40yahoo.co.uk

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT
 enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or
 qualifications.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.kictanet.or.ke/pipermail/kictanet/attachments/20131029/16c71095/attachment.htm>