The Future

• Real world exposure: hook up with Dartmouth's X509 directory.

• Work more on the Shib AA integration

  • Attribute policies complicate the task, but the flexibility of secure hardware should be helpful.

• Better conversion of record name to record number, perhaps with perfect hashing.

• Tighter integration with LDAP, specifically having a small LDAP server inside a secure coprocessor.