, 2002-02-13
PKI provides Web users with a false sense of security that undermines the security of their on-line information.
Expand all |
Post comment
PKI - Breaking the Yellow Lock
2002-02-14
Sjonnie (1 replies)
Sjonnie (1 replies)
This is news... how?
2002-02-15
TheReject (2 replies)
TheReject (2 replies)
PKI - Breaking the Yellow Lock
2002-02-17
Exothermic Reaction (2 replies)
Exothermic Reaction (2 replies)

Everyone now a days is very clear that PKI shall be always between two parties, the moment one introduces the third one it has to fail... The reason is wellknown.
Now for this simplicity various application platforms are using SSL 2.0 implementation and if at all SSL 3.0 has to deployed, then it becomes well obvious responsibility of the application provider to verify the transacted certifgicates from peers.
For me, certificate venders are only responsible for providing the certificates, how to use and manage all really is part of Application, thats why PKI is not popular and feasible solution today...
But the need shall be driving the market and approach for the proper security.
please comment ...
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/60/10780#10780