ietf
[Top] [All Lists]

Re: the curse of the S(imple) protocols, was: Re: e2e

2007-08-17 08:56:05
On Fri, 17 Aug 2007 15:50:48 +0200
Iljitsch van Beijnum <iljitsch(_at_)muada(_dot_)com> wrote:


Then again, misspelled fishing would be an order of magnitude harder
if banks and retailers started using S/MIME, which is widely
implemented today, 

S/MIME would be a fine start.  It also won't solve the problem until
someone develops a user interface that DTRT for naive users who don't
understand trust anchors, the difference between authentication and
authorization, or how to distinguish myfinancialcompany.com from
myfinancia1company.com when both have valid certificates.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb

_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/ietf