Re: Can we copy trust?

2008-06-04 Thread Peter Gutmann
[Moderator's note: I'm letting just this one through, because I think Peter's point bears repeating. --Perry] "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> writes: >IT departments put corporate trusted CA certificates in employees computers. >The US DoD puts their trusted root certificates in DoD compu

Re: Can we copy trust?

2008-06-03 Thread Dave Howe
Ben Laurie wrote: Ed Gerck wrote: Ben Laurie wrote: But doesn't that prove the point? The trust that you consequently place in the web server because of the certificate _cannot_ be copied to another webserver. That other webserver has to go out and buy its own copy, with its own domain name i

ADMIN: end of "Can we copy trust" discussion

2008-06-03 Thread Perry E. Metzger
I don't think anything new is being said in the "Can we copy trust" discussion, so I'm calling a halt to it. Perry -- Perry E. Metzger[EMAIL PROTECTED] - The Cryptography Mailing List Un

Re: Can we copy trust?

2008-06-03 Thread [EMAIL PROTECTED]
On Tue, Jun 3, 2008 at 1:05 PM, Ed Gerck <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote: > > We see that the trust relationship represented by that SSL cert can be > copied without any loss, as many times as you wish > My understanding is that an SSL certificate is only a method to carry the

Re: Can we copy trust?

2008-06-03 Thread Ed Gerck
[EMAIL PROTECTED] wrote: You don't have to trust the target site's self assertions about its own identity because you trust the root to only validate for sites that are what they claim to be. From the viewpoint of the user (which is the viewpoint used by Kelly), we see that trust can be copied

Re: Can we copy trust?

2008-06-03 Thread Ed Gerck
IanG wrote: Ed Gerck wrote: When you look at trust in various contexts, you will still find the need to receive information from sources OTHER than the source you want to trust. You may use these channels under different names, such as memory which is a special type of output that serves as in

Re: Can we copy trust?

2008-06-03 Thread Ed Gerck
Ben Laurie wrote: Obviously. Clearly I am talking about a server in a different domain. And we (Kelly and I) were talking about copying trust, where a copy is (as usual) a reproduction, a replication of an original. If you are copying trust from a domain, as represented by a SSL cert signed b

Re: Can we copy trust?

2008-06-03 Thread [EMAIL PROTECTED]
On Mon, Jun 2, 2008 at 12:37 PM, Ed Gerck <[EMAIL PROTECTED]> wrote: > In the essay "Better Than Free", Kevin Kelly debates which concepts hold > value online, and how to monetize those values. See > www.kk.org/thetechnium/archives/2008/01/better_than_fre.php > > Kelly's point can be very useful: *

Re: Can we copy trust?

2008-06-03 Thread IanG
Ed Gerck wrote: Bill Frantz wrote: [EMAIL PROTECTED] (Ed Gerck) on Monday, June 2, 2008 wrote: To trust something, you need to receive information from sources OTHER than the source you want to trust, and from as many other sources as necessary according to the extent of the trust you want.

Re: Can we copy trust?

2008-06-03 Thread Ed Gerck
Bill Soley wrote: I am thinking that trust is a relationship. "A trusts B". So if you start with "A trusts B" and you do some operation that results in "C trusts B" then you have not copied anything because "A trusts B" is not equal to "C trusts B". You can't call that operation a "copy".

Re: Can we copy trust?

2008-06-03 Thread Bill Soley
[Moderator's note: Please do not top post. --Perry] I am thinking that trust is a relationship. "A trusts B". So if you start with "A trusts B" and you do some operation that results in "C trusts B" then you have not copied anything because "A trusts B" is not equal to "C trusts B". You

Re: Can we copy trust?

2008-06-03 Thread Ben Laurie
Ed Gerck wrote: Ben Laurie wrote: But doesn't that prove the point? The trust that you consequently place in the web server because of the certificate _cannot_ be copied to another webserver. That other webserver has to go out and buy its own copy, with its own domain name it it. A copy is s

Re: Can we copy trust?

2008-06-03 Thread Anne & Lynn Wheeler
Bill Frantz wrote: really used for strangers. For people we know, recognition and memory are more compelling ways of trusting. We can use this recognition and memory in the online world as well. SSH automatically recognizes previously used hosts. Programs such as the Pet Names Tool

Re: Can we copy trust?

2008-06-02 Thread Ed Gerck
Bill Frantz wrote: [EMAIL PROTECTED] (Ed Gerck) on Monday, June 2, 2008 wrote: To trust something, you need to receive information from sources OTHER than the source you want to trust, and from as many other sources as necessary according to the extent of the trust you want. With more trust e

Re: Can we copy trust?

2008-06-02 Thread Bill Frantz
[EMAIL PROTECTED] (Ed Gerck) on Monday, June 2, 2008 wrote: >To trust something, you need to receive information from sources OTHER >than the source you want to trust, and from as many other sources as >necessary according to the extent of the trust you want. With more trust >extent, you are mo

Re: Can we copy trust?

2008-06-02 Thread Ed Gerck
Ben Laurie wrote: But doesn't that prove the point? The trust that you consequently place in the web server because of the certificate _cannot_ be copied to another webserver. That other webserver has to go out and buy its own copy, with its own domain name it it. A copy is something identica

Re: Can we copy trust?

2008-06-02 Thread Ben Laurie
Ed Gerck wrote: In the essay "Better Than Free", Kevin Kelly debates which concepts hold value online, and how to monetize those values. See www.kk.org/thetechnium/archives/2008/01/better_than_fre.php Kelly's point can be very useful: *When copies are free, you need to sell things which can n

Can we copy trust?

2008-06-02 Thread Ed Gerck
In the essay "Better Than Free", Kevin Kelly debates which concepts hold value online, and how to monetize those values. See www.kk.org/thetechnium/archives/2008/01/better_than_fre.php Kelly's point can be very useful: *When copies are free, you need to sell things which can not be copied.*