Jakub Klausa wrote:

On Mon, Apr 18, 2005 at 11:05:08PM +0200, Andrzej Targosz wrote:
=> I'm not sure if it is good idea. I think, we should trust each other. If

Trust is the keyword here. There's this old idea in the security world
called 'web of trust'. It may actually fit into this context (applied
correctly, of course).


Among the many uses of the term 'web of trust', they seem to fall into two categories:

Collegial, as in PGP
Authoritative, as in the ITU's World e-Trust initiative.

If the certification means "among our group of limited size, we trust each others' attestations for matters of limited consequence" then a collegial WOT is fine.

If the certification means "any financial services business can trust the holder of this certification to keep its busy servers running" then the WOT needs public authority.

_______________________________________________
BSDCert mailing list
[email protected]
http://lists.nycbug.org/mailman/listinfo/bsdcert

Reply via email to