Hmm, I see that you already answered some of my questions. Sorry for jumping
the gun.

On Thu, Jun 30, 2005, Uri Even-Chen wrote about "Re: A new venture - preventing 
spam":
> Either we will run it, or we can lease it to another company.  It's like
> with registration of domain names and SSL signatures.  There are
> companies who control these registrations (such as Verisign), and
> everybody trust them.  When you use DNS or SSL, you rely on these
> companies to work properly.  If they didn't, DNS and/or SSL wouldn't work.

Have you ever wondered why almost no individual owns a certificate signed
by one of the browser-recognized registrars? Heck, some organizations I
know even don't have them, and sign their own certificates on their
https site. It's because the certification process is too expensive and
complex for ordinary users to go through. It's certainly completely out
of the questions for the hoards of free-email users.

SSL's PKI (public key infrastructure) was supposed to allow a lot of things.
Among these things, you also have "client certificates" - each user would
have a certificate in his browser, and use it to log in, and so on,
instead of passwords. But this initiative never took off. Why? Because
users can't deal with the beurocracy and costs involved. I am afraid that
your solution will face the same problems.


-- 
Nadav Har'El                        |        Friday, Jul 1 2005, 24 Sivan 5765
[EMAIL PROTECTED]             |-----------------------------------------
Phone +972-523-790466, ICQ 13349191 |Unix is user friendly - it's just picky
http://nadav.harel.org.il           |about it's friends.

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to