> The (US) Federal Govt needs a method of authentication that will survive a
> nuclear war and the method we're using (Verisign) has a single point of
failure.
> As well Verisign doesn't have to renew your certificate if it doesn't want
to,
> putting you out of business.
>
> The US Govt's scheme is like the PGP web of trust where there are many
root
> authorities and if any root authority becomes invalid (looses their
private
> key, gets knocked out in a nuclear war), the system continues to work.
See, that makes perfect sense, and is in the spirit of the internet.
Does the system trust one root authority alone, or does it sample multiple
authorities to make sure that one hasn't been overtaken?
> Quite how the rest of us get into this scheme I don't know
Commercialization?
-Jacob
Listingbook.com
|