The #1 problem is that the PKI promoters are
generally ignorant of things outside of the PKI structure.
But PKI is only a complementary technology
that must in order to ever get accepted, support existing "legacy"
systems and migration. 3D Secure is an
example of how PKI can efficiently support legacy architectures.
SAML/Liberty also shows that this is the way forward.
OK, this is not the end-to-end security that you
were told to dream of, but who says that You should be the "end-point" when
paying, when your bank is really more
"authoritative" for the state of your bank-account? The same is also valid
for B2B (where the purchasing system is more authoritative than the purchasing
individuals), not to mention e-Governments.
It is a pity though that huge amounts of money
still are spent on things like the US Federal PKI, which is broken as
"an architecture for secure inter-authority
information-management". Privacy, authority-control, and automatic
archiving is fairly impossible to achieve using this completely obsolete
architecture, which is only suitable for sending person-to-person
signed e-mails.
Signatures are alive and well, they are just
adapting to a changed scenery!
Anders Rundgren
Senior Internet e-Commerce Architect
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>;
"internet-payments" <[EMAIL PROTECTED]>
Sent: Friday, December 20, 2002 00:50
Subject: Invisible Ink, E-signatures slow to
broadly catch on
=%7B4CB87141%2D6DB9%2D427E%2DA46F%2DC0147B881307%7D&siteid=mktw
Invisible ink
E-signatures slow to broadly catch on
By Barbara Kollmeyer, CBS MarketWatch
Last Update: 1:26 AM ET Dec. 19, 2002
LOS ANGELES (CBS.MW) -The advent of electronic signatures heralded a new
age in online commerce -- a numeric code to replace an individual's
handwriting to register agreement.
Yet since President Clinton signed the Electronic Signature Act over two
years ago (see related story), indications are few companies are taking
full advantage. While little hard data exists, consumers have been slow to
embrace the technology due to fear of fraud and a lack of understanding,
experts said.
.. snip ..
