ietf-asrg
[Top] [All Lists]

Re: [Asrg] Email Certification Path Proposal

2003-03-11 02:21:04
On Tue, 11 Mar 2003 03:50:07 -0500, Valdis(_dot_)Kletnieks(_at_)vt(_dot_)edu 
wrote:

On Tue, 11 Mar 2003 08:16:04 GMT, Jacqui Caren 
<jacqui(_dot_)caren(_at_)ig(_dot_)co(_dot_)uk>  said:

If we could find some sucker^Wkind-person who would host the initial
central CA for free and we could then find say a few dozen companies
who would offer free public CA's we could have an infrastructure in place
with little or no cost to the public.

And said certificates would be worth what they cost. Little to nothing.

Running a CA is easy.  Certifying that the users are who they say they
are is *HARD*.

[ **very** good points snipped ]

If you don't think the background check isn't needed, you need to think
about it some more....

It is even worse in that in the UK, the legal requirements make
being a CA **seriously** expensive. Every company that has moved
into the UK ecommerce/etrust market has now dropped out of the market.

I did not even consider the need for background checks etc - even though
many people I know do at least credit checks before accepting a customer
 - in the UK the number of cases discussed where prospects are actually
broke at the point of contract is getting scary!


Perhaps I should stick to lurking :-)

Jacqui

Jacqui Caren, Ingram Group Ltd. jacqui(_at_)ig(_dot_)co(_dot_)uk
ph: +44 (0) 1483 8628xx main=00 fax=01 ddi=65
http://www.ig.co.uk/ http://www.sitedirector.org/
http://www.perl.co.uk/


_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg