> Yes, PKI makes for a fascinating study of what goes wrong when random
> numbers collide with people trying to attach some significance to
> them. :)
Its going to be fascinating to see what happens when (if)
website owners realise exactly what they've been getting
for their money when they buy their SSL certificates
("I've been paying $200/year for THAT?")
> I do prefer the PGP model:
> "Hello, here's my certificate. You know me, and it has my name on it,
> so let's start communicating. You don't know me? Oh, but your
> friends do and they're using my certificate... so you can too!"
still, the PGP model isn't really appropriate
when it comes to asserting identity beyond just email
addresses and securing that communication..
I still think a properly constructed PKI infrastructure
for health is vital to take those steps beyond just
sending emails to each other (of course we're not
really even doing that yet well but all in due time)
Andrew
_______________________________________________
Gpcg_talk mailing list
[email protected]
http://ozdocit.org/cgi-bin/mailman/listinfo/gpcg_talk