I will try to jump in here.

I think the most important information to communicate is that what
Chloe wants to do is not possible today. It would be a major research
project to set up an OS which could allow applications to create
attestations ("quotes") that would allow a remote computer to know
that it was talking to a particular application. Probably the IBM IMA
project came closest to this:
http://domino.research.ibm.com/comm/research_people.nsf/pages/sailer.ima.html
. There are dozens of problems that would have to be solved before
such an attestation would be useful and provide any meaningful
security.

As far as object policy, that is really just a fancy name for the
passwords which can be optionally set to allow you to use a key or
unseal a blob.

Hal Finney

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to