Re: exporting signatures only/CAPI (was Re: Why not PGP?)

[Adam Shostack <adam@homeport.org>]

Steve Schear wrote:
| (Adam Back wrote:)
| >The new owner of the CAPI signatory key would need a good reputation,
| >and presumably a policy of signing any (non-GAKked) CAPI modules
| >signed by microsoft, and anything else that anyone wants signed.

| An excellent suggestion.

	How does a signer maintain a reputation if it will sign
anything anyone wants signed?  I can see a business for a non-US
company to certify a CSP and sign it, but thats not the same as
anything MS signs, or anything anyone else wants signed.

	There may be room for compitition here. :)

Adam

-- 
"Every year the Republicans campaign like Libertarians, and then go to
Wasthington and spend like Democrats."

Vote Harry Browne for President.  http://www.harrybrowne96.org