John, The establishment of the PKI is implied in Section 83C of the Act which spells out the functions of the Commission in relation to electronic transactions. In order to realize the mandate of the Commission as envisaged in the Act, the Commission would have to set up a national PKI. The functions of the Commission as per Section 83C are as follows: * Facilitate electronic transactions by ensuring the use of reliable electronic records; * Facilitate electronic commerce and eliminate barriers to electronic commerce such as those resulting from uncertainties over writing and signature requirements; * Promote public confidence in the integrity and reliability of electronic records and electronic transactions; * Foster the development of electronic commerce through the use of electronic signatures to lend authenticity and integrity to correspondence in any electronic records; * Promote and facilitate efficient delivery of public sector services by means of reliable electronic records; * Develop sound frameworks to minimize the incidence of forged electronic records and fraud in electronic commerce and other electronic transactions. Further, the Regulations, in Sections 3 through 19, define the PKI framework in more detail including the requirement for a licence, responsibilities of a certification service provider, issuance/renewal/suspension/revocation of certificates, obligations of a subscriber, performance audits, security guidelines and incident handling as well as winding up of operations of a certification service provider. Christopher Wambua Manager - Communications Consumer and Public Affairs Department Communications Commission of Kenya P.O. Box 14448 NAIROBI 00800 Tel: +254 20 4242209 info@cck.go.ke<mailto:info@cck.go.ke> www.cck.go.ke<http://www.cck.go.ke> From: kictanet [mailto:kictanet-bounces+wambua=cck.go.ke@lists.kictanet.or.ke] On Behalf Of John Kariuki Sent: Friday, October 25, 2013 7:16 PM To: Wambua, Christopher Cc: Consumer and Public Affairs; KICTAnet ICT Policy Discussions Subject: Re: [kictanet] Public consultation on the licensing framework for Electronic Certification Service Providers (E-ECSP) Hi Wambua, Thanks for the information. I notice that you state and I quote " In addition, the Act provides for the establishment of a framework based on Public Key Infrastructure(PKI) model." I have reviewed both the Act and the the corresponding regulations and I am unable to trace this reference.Please advise which sections of the Act and the regulations have this provision. Many thanks, John Kariuki On Friday, 25 October 2013, 15:55, Josphat Karanja <karanjajf@gmail.com<mailto:karanjajf@gmail.com>> wrote: Hi Wambua, Thanks for the information. Question is how does this initiative tie-in with the PKI project currently being undertaken by the ICT Authority? Kind regards Josphat Regards ........................................................... Josphat Karanja, Blog: http://mawazoyamkenya.blogspot.com/ On Fri, Oct 25, 2013 at 3:23 PM, Ali Hussein <ali@hussein.me.ke<mailto:ali@hussein.me.ke>> wrote: Wambua Asante for this Information. Ali Hussein +254 0770 906375 / 0713 601113 "Kujikwaa si kuanguka, bali ni kwenda mbele" (To stumble is not to fall but a sign of going forward) - Swahili Proverb Sent from my iPad On Oct 25, 2013, at 2:29 PM, "Wambua, Christopher" <Wambua@cck.go.ke<mailto:Wambua@cck.go.ke>> wrote: Listers, As you are aware, the Kenya Information and Communications Act, Cap 411A, provides a legal framework for the provision of electronic commerce services in the country. In particular, the Act and the Electronic Certification and Domain Name Administration) Regulations, 2010, define the conditions that must be met for electronic communication to be recognized as authentic or as emanating from either a person or an institution. In addition, the Act provides for the establishment of a framework based on a Public Key Infrastructure (PKI) model. In recognition of the foregoing, CCK has developed a licensing framework for Electronic Certification Service Providers (E-CSP) to support the PKI framework and which will subsequently lead to an amendment of the Market Structure. CCK, therefore, wishes to invite stakeholders and members of the public to submit their comments on the proposed licensing framework for Electronic Certification Service Providers. The comments submitted will be considered for incorporation in the final documents. The consultation paper, the draft licence and the application form are available on our website at http://www.cck.go.ke/links/consultations/current.html and will remain open for public review and feedback between 25th October to 25th November 2013. Comments/inputs may be submitted via e-certification@cck.go.ke<mailto:e-certification@cck.go.ke> or the address given below: Director General Communications Commission of Kenya CCK Centre Waiyaki Way, Opp. Kianda School P.O Box 14448 Nairobi - 00800 _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/karanjajf%40gmail.com The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/ngethe.kariuki2007%40y... The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.