One must clearly understand the difference between PKI technology and web application. It is prime responsiblity of web application developer to ensure that entire processing of the transaction is secured.

PKI is a the technology and is to be used as it is supposed to be used and not as per the wishes of application developer just to make product fast / attractive etc.

such articles creat unnecessary confusion and fear about PKI technology in the mind of normal users.

When such articles are published a care must be taken that normal user is made aware of difference between wrong application development/deployment and the technology issue.

Hope this will help to understand difference between technology and application development/deployment issue.













[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/60/10812#10812