[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Cypherpunk Certification Authority

To: [email protected] (Michael Froomkin)
Subject: Re: Cypherpunk Certification Authority
From: Adam Shostack <[email protected]>
Date: Sat, 25 Nov 1995 16:05:28 -0500 (EST)
Cc: [email protected] (Cypherpunks Mailing List)
In-Reply-To: <[email protected]> from "Michael Froomkin" at Nov 25, 95 03:20:23 pm
Sender: [email protected]


| C) Don't settle for less than X.509 ver 3, because this allows the 
| certificate to carry within it a reference to the location of the CRL 
| list.  Use that feature.

	Does X.509 version 3 fix the problem that Ross Anderson points
out in his 'Robustness Principles' paper? (Crypto '95 proceedings, or
ftp.cl.cam.ac.uk/users/rja14/robustness.ps.Z)

	Its an excellent paper, well worth reading, but the basic
problem is that X.509 encrypts before signing.

Adam

-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume

Follow-Ups:
- Re: Cypherpunk Certification Authority
  - From: [email protected] (Mark Chen)

References:
- Re: Cypherpunk Certification Authority
  - From: Michael Froomkin <[email protected]>

Prev by Date: Cypherpunk Certification Authority
Next by Date: Re: crypto for porno users
Prev by thread: Re: Cypherpunk Certification Authority
Next by thread: Re: Cypherpunk Certification Authority
Index(es):
- Date
- Thread