Trust is not transitive but cost measures are pretty stable Producing a web of trust with a thousand bogus entries costs essentially nothing
Producing such a web with twenty links to verified parties is much more expensive Incidentally, I can't claim any originality for the extended work factors I use as it happens. Although I came to them independently it turns out that a co collaborator had gone so far as to organize an event on the topic, But what I had not appreciated earlier is just what a difference it makes to cast the web of trust problem in terms of a work factor metric and introduce a combination of peer and ttp trust providers. Sent from my difference engine > On Oct 22, 2013, at 10:19 AM, Stephen Kent <[email protected]> wrote: > > DataPacRat, >> ... >> The reasons you list are the ones behind why I included the >> 'Confidence' parameter in the Signed vCard spec. In fact, that >> parameter is the key to the whole approach. > A similar proposal, adding qualitative metrics to the basic web of trust > model, > was the focus of a PhD thesis about 20 years ago, in France. It was not a > great > idea; trust is not transitive and adding numbers to the mix doesn't change > that, > although it can lead to considerable confusion for users. > > Steve > _______________________________________________ > perpass mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/perpass _______________________________________________ perpass mailing list [email protected] https://www.ietf.org/mailman/listinfo/perpass
