> >We're already trusting chains of signficant length (i.e. DNS delegation)
> >with no decent verification at all.
> 
> That's a good point.  PKI on DNS might not be the most trustworthy system
> imaginable, but it would probably be an improvement over no PKI.  Provided
> it doesn't break DNS...

and also provided people don't say "hey, now there's a PKI, so I really can 
trust it!"

Keith
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to