Re: PKI and Relying Parties
From: Paul Rubin (phr-n2002a@nightsong.com)Date: 03/29/02
- Next message: Robert Morelli: "ssh + bash"
- Previous message: S. O. Chau: "OpenSSH authentication key length"
- In reply to: Citizen Fish: "Re: PKI and Relying Parties"
- Next in thread: Citizen Fish: "Re: PKI and Relying Parties"
- Reply: Citizen Fish: "Re: PKI and Relying Parties"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Paul Rubin <phr-n2002a@nightsong.com> Date: 28 Mar 2002 22:32:54 -0800
Citizen Fish <fishy@<tut tut>answer.me.uk> writes:
> (In my opinion) Any public CA not providing 1) and a relying party
> agreement against it is a waste of time. Essentially you need to strike up
> relying party agreements with CAs (and their revocation lists) which ensure
> that they carry liability for not meeting their advertised CPs, which will
> include authentication process, crl publishing frequency and process.
Do these even exists? I've seen CA agreements that indemnify the
cert holder in various ways, but I've never seen one that promised
anything for relying parties.
- Next message: Robert Morelli: "ssh + bash"
- Previous message: S. O. Chau: "OpenSSH authentication key length"
- In reply to: Citizen Fish: "Re: PKI and Relying Parties"
- Next in thread: Citizen Fish: "Re: PKI and Relying Parties"
- Reply: Citizen Fish: "Re: PKI and Relying Parties"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
