, 2002-02-13
PKI provides Web users with a false sense of security that undermines the security of their on-line information.
Expand all |
Post comment
PKI - Breaking the Yellow Lock
2002-02-14
Sjonnie (1 replies)
Sjonnie (1 replies)
This is news... how?
2002-02-15
TheReject (2 replies)
TheReject (2 replies)
That is like catching a plane from New York to Washington, and then complaining that you have to find a way from the airport to your house when you have a perfectly valid airline ticket. The job of PKI is to ensure that the information arrives at the web server in an untampered, unaltered, and unsnooped manor. In general that is what it does, with a very high level of success. The investment in set-up to get around the normal SSL to MiM it is not worth the gains generally. Once the data has arrived at the server it is the job of the system designers to ensure that it is used and stored properly.
This is not the story the headline sold.
Nor is it even well written for that matter.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/60/10901#10901