¿ªÔÆÌåÓýOn 08/10/18 23:00, Dr. David Kirkby
from Kirkby Microwave Ltd wrote:
A wouldn't have thought the "ownership" carries any useful information. I presume it can be easily forged. As a colleague of mine, Stefek Zaba, used to tell everybody in the mid-late 90s, "my name is Donald Duck, and I have a digital certificate to prove it". The only important part of a digital certificate is that it is vouched for by the chain of certificates to a trusted root certificate. If you trust the chain then you have (some) trust in the site. Of course it isn't necessary to have a certificate that has a chain to a trusted root certificate. One system I worked on had a "self-signed" certificate, and that was completely sufficient for our purposes. "If you think encryption will solve your problem, you don't understand encryption and you don't understand your problem". Then s/encryption/identity/ (as the UK government has spent a lot of money finding out with its plans for digital identity certificates for all the Queens's subjects) |