[BSDCert] Peer Certifications

[Wes Kussmaul]

Hexren wrote:
> 
>>Jakub Klausa wrote:
> 
> 
>>>On Mon, Apr 18, 2005 at 11:05:08PM +0200, Andrzej Targosz wrote:
>>>=> I'm not sure if it is good idea. I think, we should trust each other. If
>>>
>>>Trust is the keyword here. There's this old idea in the security world
>>>called 'web of trust'. It may actually fit into this context (applied
>>>correctly, of course).
>>> 
>>>
>>
>>Among the many uses of the term 'web of trust', they seem to fall into 
>>two categories:
> 
> 
>>Collegial, as in PGP
>>Authoritative, as in the ITU's World e-Trust initiative.
> 
> 
>>If the certification means "among our group of limited size, we trust 
>>each others' attestations for matters of limited consequence" then a 
>>collegial WOT is fine.
> 
> 
>>If the certification means "any financial services business can trust 
>>the holder of this certification to keep its busy servers running" then 
>>the WOT needs public authority.
> 
> 
> ---------------------------------------------
> 
> Sounds nice. But guessing from your nick and mail, I would say you do
> hve a bussiness interest in stating that and that Tabelio cann solve
> some problems. (I do not mean to imply that that is necessarily wrong)
> But I with my limited exposure to the security world have never heard
> of Zabelio do they/you have some kind of reference besides the Website

You didn't need to go to that much trouble to find my connection to 
Tabelio, as it's right on the Tabelio site.

I was a bit impulsive when I posted the Tabelio link, as there have been 
no announcements yet. I expect to make an announcement in Riga on May 26 
- see 
http://www.itu.int/ITU-D/e-strategy/Seminars/Latvia/Draft%20Agenda%2012%20April%202005%20v31.pdf
for context.

This is just for my friends in the BSD world, OK?

You can give others this more public link: 
http://csrc.nist.gov/pki/twg/y2003/presentations/twg-03-17.pdf

Wes

Wes