Re: Possible way to increase Security

2004-02-22 Thread rhkelly
Duane wrote: The currently level and ease of use of cryptography is pretty poor, and perhaps that's understating it somewhat... This is a popular misconception among the cognoscenti, who feel that everybody should - for instance - always encrypt all e-mail. As a consequence, we all somehow

Re: Possible way to increase Security

2004-02-19 Thread Emil Assarsson
Whay don't you use LDAPv3 as protocol? This makes it easy to set up query limits, slave servers and so on. This could act as a address book also. Try www.OpenLDAP.org. The code in mozilla is mostly there, I belive. Maybe there is some issues with LDAPv3 och getting the cert. - Emil Assarsson

Re: Possible way to increase Security

2004-02-19 Thread Duane
Emil Assarsson wrote: Whay don't you use LDAPv3 as protocol? This makes it easy to set up query limits, slave servers and so on. This could act as a address book also. Try www.OpenLDAP.org. The code in mozilla is mostly there, I belive. Maybe there is some issues with LDAPv3 och getting the

Re: Possible way to increase Security

2004-02-19 Thread Julien Pierre
Duane, The idea is good, but as you point out, protocols such as LDAP already exist to do this. What's missing is a global (worldwide) directory that's independent of a particular corporation of government. The key problem is that no one entity would have the resources to host such a server.

Re: Possible way to increase Security

2004-02-19 Thread Duane
Julien Pierre wrote: Duane, The idea is good, but as you point out, protocols such as LDAP already exist to do this. What's missing is a global (worldwide) directory that's independent of a particular corporation of government. The key problem is that no one entity would have the resources to

Possible way to increase Security

2004-02-18 Thread Duane
I'm currently drawing up a proposal for an independent submission for an Internet Draft and I'm after feed back on this. My idea is pretty simple, if all you have is an email address of the person you want to email, and they have a public certificate listed in the system, client software