<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-name:"List Paragraph\,List Item";
mso-style-priority:99;
mso-style-link:"List Paragraph Char\,List Item Char";
margin-top:0in;
margin-right:0in;
margin-bottom:10.0pt;
margin-left:.5in;
line-height:115%;
font-size:11.0pt;
font-family:"Times New Roman","serif";}
span.ListParagraphChar
{mso-style-name:"List Paragraph Char\,List Item Char";
mso-style-link:"List Paragraph\,List Item";
font-family:"Times New Roman","serif";}
span.EmailStyle20
{mso-style-type:personal;
color:black;}
span.EmailStyle21
{mso-style-type:personal;
color:black;}
span.EmailStyle23
{mso-style-type:personal-reply;
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:271472209;
mso-list-type:hybrid;
mso-list-template-ids:-1182336030 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:590702414;
mso-list-template-ids:-751418326;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2
{mso-list-id:932401624;
mso-list-template-ids:311699290;}
@list l2:level1
{mso-level-start-at:4;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3
{mso-list-id:1874995612;
mso-list-template-ids:-232913248;}
@list l3:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level1 lfo6
{mso-level-start-at:4;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='color:black'>Warigia,<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:black'>In my view, the assessment of CCK’s
performance in respect to Universal Access Fund is not fair. <o:p></o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:black'>I say this because the legal framework
for the Universal Service Fund (USF) is barely three years old (i.e. the <i>Kenya
Information and Communications Act of 2009</i> and the <i>Kenya Information and
Communications Universal Access and Service Regulations of 2010</i>). It is
these pieces of legislation that charge CCK with the responsibility of managing
and administering the Fund. From the date USF’s legal instruments were
put in place, the issue of doing nothing in the last six years does not arise.
You will also recall that the Universal Service Access Committee (USAC), which
is mandated to advise the CCK Board on the management of the Fund, was
appointed in December 2012 by the Minister for Information and Communications. </span><span
lang=EN-GB style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-GB style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:black'>As it awaited the legal framework
to be in place, CCK undertook a number of preparatory activities for the
implementation of USF. These include:<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='font-family:Symbol;color:black'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='color:black'>Establishing a
Statistical function within the Commission in view of the need for up to date
information on access and usage of ICT to inform universal access planning.
This is the Unit that prepares the Quarterly Sector Statistics.<o:p></o:p></span></p>
<p class=MsoListParagraph style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:justify;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='font-family:Symbol;color:black'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='color:black'>Carrying out a number
of studies to guide the implementation of the Fund, including the National ICT
Survey (2010/2011) and the ICT Access Gaps Study (2011). The Survey was
undertaken in conjunction with the Kenya National Bureau of Statistics to
provide baseline information on the level of access and usage of ICTs at the
household level in Kenya. The Survey provides benchmark indicators
against which to measure the penetration of ICT services particularly
through the USF. It provided a key input into the ICTs Access Gap study
of 2011 undertaken by APOYO Consultoria. The ICT Access Gap Study identified
areas that lacked access to voice, postal and data services and provide cost estimates
for closing the gaps. It has provided the basis for identifying the areas
requiring USF interventions and prioritizing allocation of funds. These
reports are available on the CCK website. <o:p></o:p></span></p>
<ul style='margin-top:0in' type=disc>
<li class=MsoNormal style='margin-bottom:10.0pt;text-align:justify;line-height:
115%;mso-list:l0 level1 lfo2'><span style='font-size:11.0pt;line-height:
115%;color:black'>Implementing a number of UA pilot projects whose
experience will be key in implementing national UA projects. The pilot
projects include: 16 ICT Centers in Secondary Schools (2 in each province),
4 Community Centers, 8 ICT Centers schools for PWDs (covering all
secondary schools for PwDs in Kenya), 10 e-Resource Centers within the
Kenya National Library Service outlets, E-health Project (in collaboration
with the Ministry of Health and Qualcomm Inc), Content Development that
include the Digitization of the Kenya Certificate of Secondary School (KCSE)
Form I and II curriculum by KIE and a Web Portal for Persons With
Disabilities (in partnership with the National Council for Persons with
Disabilities and United Disabled Persons of Kenya)</span><span
style='font-size:10.0pt;line-height:115%;font-family:"Arial","sans-serif"'>.
</span><span style='font-size:11.0pt;line-height:115%;color:black'>These
projects have been funded largely by the Commission. </span><span
style='font-size:10.0pt;line-height:115%;font-family:"Arial","sans-serif"'><o:p></o:p></span></li>
</ul>
<p class=MsoListParagraph style='mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;text-align:justify;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span
style='font-family:Symbol;color:black'><span style='mso-list:Ignore'>·<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='color:black'>From 2012 to date, the
Commission has been developing USF program concepts, projects prioritization
criteria and USF Strategy with technical support from USAID’s Global
Broadband Innovation (GBI) programme. Again with support from the USAID, the
Commission in conjunction with the Ministry of Information and Communications,
Kenya ICT Board, E-Government Directorate, Vision 2030 Secretariat and National
Communications Secretariat and other stakeholders are developing a National
Broadband Strategy (NBS). This strategy is important in the realization of
universal access to broadband services in Kenya. <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
margin-left:.25in;text-align:justify'><span style='color:black'>Starting from
July 2013, the Fund shall be brought into operation. In this regard, all
licensees shall be expected to begin remitting their statutory contribution to
the Fund. On its part, the Commission has set aside Kshs1,000,000,000 as seed
money for the USF. <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
margin-left:.25in;text-align:justify'><span style='color:black'>I hope this
sheds more light on this matter.<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
text-align:justify'><span style='color:black'>Wambua <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
margin-left:.25in;text-align:justify'><span style='color:black'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> kictanet
[mailto:kictanet-bounces+wambua=cck.go.ke@lists.kictanet.or.ke] <b>On Behalf Of
</b>Warigia Bowman<br>
<b>Sent:</b> Thursday, March 21, 2013 4:50 PM<br>
<b>To:</b> Wambua, Christopher<br>
<b>Cc:</b> KICTAnet ICT Policy Discussions<br>
<b>Subject:</b> Re: [kictanet][Skunkworks] Fwd: Kenya’s PKI Destined for
Failure?<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><br>
Dear Brian <br>
<br>
<span style='color:black'>Thank you for this very thoughtful discussion. </span><o:p></o:p></p>
<ol start=4 type=1>
<li class=MsoNormal style='color:#6600CC;mso-margin-top-alt:auto;mso-margin-bottom-alt:
auto;mso-list:l3 level1 lfo6'><strong>Inertia</strong>: CCK has proven to
be very poor at the timely execution of functions that fall outside their
core mandate of licensing, regulation and resource management. A perfect
example is the implementation of the Universal Service Fund, which CCK
insisted on handling as an inhouse function instead of facilitating the
setup of a dedicated entity to handle the task. It has been over 6 years
since regulation and legislation regarding the USF came into place and
there is still nothing to speak of. I will reserve this as a subject for
another day (it is a long and detailed one!)<o:p></o:p></li>
</ol>
<p>Erm, am I the only one embarassed that all of our neighbors have a
functional USF, but Kenya does not? <o:p></o:p></p>
<p><strong>Recommendations</strong><o:p></o:p></p>
<p><span style='color:#6600CC'>The Government should immediately consider
adopting a <strong>Public Private Partnership</strong> approach for the
implementation of Kenya’s NPKI. This is especially timely because we now
have a fully ratified Public Private Partnership Policy that provides a variety
of models for project implementation. This will not only ensure involvement
from crucial stakeholders but also free the Root Authority from the problems
highlighted above (and probably many others) while at the same time ensuring
that enough private sector energy and enthusiasm is infused into the project so
that it moves with speed and determination. Success stories such as KENIC and
TEAMS show that it is not only possible but that it can be done with ease.<o:p></o:p></span></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><br>
<span style='color:black'>PPPs are the respected model for many kinds of
endeavors, and this is a very strong suggestion. <br>
<br>
Yours, Warigia</span><o:p></o:p></p>
<div>
<p class=MsoNormal>On Thu, Mar 21, 2013 at 8:24 AM, Lucy Kimani <<a
href="mailto:lkimani@yahoo.com" target="_blank">lkimani@yahoo.com</a>>
wrote:<o:p></o:p></p>
<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0>
<tr>
<td valign=top style='padding:0in 0in 0in 0in'>
<p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>Ali and
Brian +1</span><o:p></o:p></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>CCK
can be the CA for the government but there has to be Private Sector based CAs
as well to avoid conflict of interest. What may seem complex when
broken down may not be all that bad as evidenced in this paper:<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><a
href="http://www.articsoft.com/whitepapers/AustPKI03SMr2.pdf" target="_blank">http://www.articsoft.com/whitepapers/AustPKI03SMr2.pdf</a></span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>I especially
like the not always waiting for the government "</span>The business and
Internet communities are not waiting for some over-arching system to be put
into<o:p></o:p></p>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>place
by governments or agencies such as the UN. They are seizing opportunities as
they arise, putting in place systems that they trust and selecting their own
RCA – a PRIVATE RCA – if they select one at all. An example of
this is the Secure Electronic Transaction (SET) PKI developed by Visa and
MasterCard. Figure 4 represents the basic SET PKI as identified by Ford &
Baum. A new version of the SET protocol has recently been introduced,
sometimes referred to as 3DSET. It<o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>expects
to provide the customer with a provable digital receipt for a transaction, establishing
the formality of the contract between the customer and the merchant,
something that was lacking in the original implementation."<o:p></o:p></p>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>VISA
introduced 3D SET in 2000 to address issues with SET PKI. <o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>3D
SET simplifies the SET protocol into three domain Model:<o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
1) acquirer domain,<o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
2) issuer domain,<o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
3) interoperability domain.<o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>3D
SET provide a flexible framework that allows banks and acquirers to use their
method to authenticate cardholders and merchants in a transaction.<o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-family:"Arial","sans-serif"'>--- On </span><b><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Thu, 3/21/13, Ali
Hussein <i><<a href="mailto:ali@hussein.me.ke" target="_blank">ali@hussein.me.ke</a>></i></span></b><span
style='font-family:"Arial","sans-serif"'> wrote:</span><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><br>
From: Ali Hussein <<a href="mailto:ali@hussein.me.ke" target="_blank">ali@hussein.me.ke</a>><br>
Subject: Re: [kictanet] [Skunkworks] Fwd: Kenya’s PKI Destined for
Failure?<br>
To: <a href="mailto:lkimani@yahoo.com" target="_blank">lkimani@yahoo.com</a><o:p></o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><br>
Cc: "KICTAnet ICT Policy Discussions" <<a
href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Date:
Thursday, March 21, 2013, 7:24 AM<o:p></o:p></span></p>
<div>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Georgia","serif"'>Adam
+1<br>
<br>
And I give Brian the highest commendation for highlighting this issue. We
must always try our level best to embrace the Multi-Stakeholder regime
because as much as sometimes it sound like we are in the Tower of Babel
ultimately the best solutions emerge (most of the time).<br>
<br>
Regards</span><b><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><br>
<br>
Ali Hussein</span></b><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<div>
<p style='margin:0in;margin-bottom:.0001pt'><b><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>CEO, 3mice interactive media ltd</span></b><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p style='margin:0in;margin-bottom:.0001pt'><b><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>Partner, Telemedia Africa Ltd</span></b><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'> <o:p></o:p></span></p>
<p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:10.0pt;
font-family:"Georgia","serif"'>Tel: +254713601113</span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:10.0pt;
font-family:"Georgia","serif"'>Twitter: @AliHKassim</span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:10.0pt;
font-family:"Georgia","serif"'>Skype: abu-jomo</span><span style='font-size:
10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:10.0pt;
font-family:"Georgia","serif"'>LinkedIn: <a
href="http://ke.linkedin.com/in/alihkassim" target="_blank">http://ke.linkedin.com/in/alihkassim</a></span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Georgia","serif"'>Blog:
<a href="http://www.alyhussein.com" target="_blank">www.alyhussein.com</a></span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'> <o:p></o:p></span></p>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>On
Thu, Mar 21, 2013 at 12:58 PM, Adam Nelson <<a
href="http://mc/compose?to=adam@varud.com" target="_blank">adam@varud.com</a>>
wrote:<o:p></o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>I
think Brian's original point is well taken. It's not ideal for a Korean
government agency to hold such important keys. However, Kenya can't
just start its own key without at least a few years of lead time to get on a critical
mass of browsers and operating systems by default (although it should start
now just to get the ball rolling). Finland and Turkey have CAs
(although Turkey's was famously hacked with <a href="http://google.com"
target="_blank">google.com</a> signatures).<o:p></o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>I
would suggest that the certificate authority for this be one of the most
trusted and common commercial ones - Equifax. That's what Google uses
and because they're commercial, will probably be more responsive to the needs
of the government than a Koren agency.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>-Adam<o:p></o:p></span></p>
</div>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><br
clear=all>
<o:p></o:p></span></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><a
href="https://twitter.com/varud" target="_blank">https://twitter.com/varud</a></span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><a
href="https://www.linkedin.com/in/adamcnelson" target="_blank">https://www.linkedin.com/in/adamcnelson</a></span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
</div>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>On
Thu, Mar 21, 2013 at 12:32 PM, Kivuva <<a
href="http://mc/compose?to=Kivuva@transworldafrica.com" target="_blank">Kivuva@transworldafrica.com</a>>
wrote:<o:p></o:p></span></p>
</div>
</div>
<blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;
margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'>
<div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Good
points from Brian and Evans.<o:p></o:p></span></p>
<div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>I
think the elephant in the room is CCK to be the Root Certification
Authority. PPP as Brian puts it might be the best way to go, although it has
its own challenges, as we saw last year when KENIC was facing leadership
challenges, and discord within the board. Other channels might be
to tender for local companies to bid to be the RCA. This has worked very well
in developed countries.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>The
issue of HR can be sorted if we are willing to empower our youth, by say
Knowledge Transfer. Unfortunately, these Asians are not very keen
in transferring such knowledge to the client side of the business
since they want to be indispensable. But we can be forceful, and find ways to
train people who will administer the NPKI system. We currently have
thousands of security experts in the country, and we are willing to learn
more.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Kind
Regards.<span style='color:#888888'><o:p></o:p></span></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#888888'><o:p> </o:p></span></p>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:#888888'>-- <br>
______________________<br>
Mwendwa Kivuva</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
</div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>_______________________________________________<br>
skunkworks mailing list<br>
<a href="http://mc/compose?to=skunkworks@lists.my.co.ke" target="_blank">skunkworks@lists.my.co.ke</a><br>
------------<br>
List info, subscribe/unsubscribe<br>
<a href="http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks"
target="_blank">http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks</a><br>
------------<br>
<br>
Skunkworks Rules<br>
<a href="http://my.co.ke/phpbb/viewtopic.php?f=24&t=94" target="_blank">http://my.co.ke/phpbb/viewtopic.php?f=24&t=94</a><br>
------------<br>
Other services @ <a href="http://my.co.ke" target="_blank">http://my.co.ke</a><o:p></o:p></span></p>
</blockquote>
</div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><br>
_______________________________________________<br>
kictanet mailing list<br>
<a href="http://mc/compose?to=kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet"
target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br>
Unsubscribe or change your options at <a
href="https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com"
target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for
people and institutions interested and involved in ICT policy and regulation.
The network aims to act as a catalyst for reform in the ICT sector in support
of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online
that you follow in real life: respect people's times and bandwidth, share
knowledge, don't flame or abuse or personalize, respect privacy, do not spam,
do not market your wares or qualifications.<o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>-----Inline Attachment Follows-----<o:p></o:p></span></p>
<div>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'>_______________________________________________<br>
kictanet mailing list<br>
<a href="http://mc/compose?to=kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet"
target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Unsubscribe
or change your options at <a
href="https://lists.kictanet.or.ke/mailman/options/kictanet/lkimani%40yahoo.com"
target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/lkimani%40yahoo.com</a><o:p></o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for
people and institutions interested and involved in ICT policy and regulation.
The network aims to act as a catalyst for reform in the ICT sector in support
of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online
that you follow in real life: respect people's times and bandwidth, share
knowledge, don't flame or abuse or personalize, respect privacy, do not spam,
do not market your wares or qualifications.<o:p></o:p></span></p>
</div>
</div>
</div>
</td>
</tr>
</table>
<p class=MsoNormal><br>
_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br>
Unsubscribe or change your options at <a
href="https://lists.kictanet.or.ke/mailman/options/kictanet/warigia%40gmail.com"
target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/warigia%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for
people and institutions interested and involved in ICT policy and regulation.
The network aims to act as a catalyst for reform in the ICT sector in support
of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online
that you follow in real life: respect people's times and bandwidth, share
knowledge, don't flame or abuse or personalize, respect privacy, do not spam,
do not market your wares or qualifications.<o:p></o:p></p>
</div>
<p class=MsoNormal><br>
<br clear=all>
<br>
-- <o:p></o:p></p>
<div>
<div>
<p class=MsoNormal>Dr. Warigia Bowman<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>Assistant Professor <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>Clinton School of Public Service<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>University of Arkansas<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><a href="mailto:wbowman@clintonschool.uasys.edu"
target="_blank">wbowman@clintonschool.uasys.edu</a><o:p></o:p></p>
</div>
<p class=MsoNormal>------------------------------------------------- <br>
View my research on my SSRN Author page: <br>
<a href="http://ssrn.com/author=1479660" target="_blank">http://ssrn.com/author=1479660</a>
<br>
-------------------------------------------------- <o:p></o:p></p>
</div>
</div>
</body>
</html>