What's out of scope?

[Stephen Farrell <stephen.farrell@xxxxxxxxx>]

Hi all,

As we get started on drafting a strawman charter (Sean and
I are starting work on that now-ish), I think one of the
things that might be good to be say something about is
what's out of scope.

I would assume that CMC/CMP related managment is out of
scope, as is certificate retrieval (as done by LDAP)
and status checking (SCVP-to-be,OCSP,XKMS).

Similarly local trust anchor storage and use mechanisms
(and their security) should be out of scope.

Other inputs? (Don't worry about wording just yet.)

Cheers,
Stephen.