ietf
[Top] [All Lists]

RE: PKI is weakly secure

2007-07-10 11:51:15
Security is a property of systems and not of technologies.

In particular security is risk management and not the elimination of all risk. 
Even the best PKI will not provde you with the slightest protection against a 
meteor strike.

PKI provides opportunities for technical risk mitigation which are not 
available in normal circumstances. For example the root keys associated with 
high security embedded roots are created in high security facilities that have 
no network access and are kept in those facilities for their entire operational 
lives, at the end of which they are physically destroyed.

Such operational controls are not likely to be acceptable to network 
administrators at your average ISP.

_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/ietf