Nicholas Weaver wrote:
> And PKI, dispite what you say, is not broken. Heirarchical trust
> OR web of trust, you have to have some transitive trust to make
> a usable system.
As the Internet (and telco net, too, which has been used for
more than 100 years with moderate security) is the hierarchical
trust OR the web of trust, to which PKI adds nothing, which is
how PKI is broken.
> you have to have some transitive trust to make a usable system.
Sure. We already have the transitive trust between ISPs of the
Internet and plain old DNS is the usable system.
DNSSEC adds nothing to it.
Masataka Ohta
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop