Steve (Crocker)> The protocol is structured with confidentiality optional
but authentication, etc. always included. IT's natural to describe the
protocol with the required elements first and optional elements after
that; I don't think it reflects any specific priority.
Steve, I'm confident that you understand that to make some features
mandatory and others optional does reflect very specific priorities. If
you feel otherwise, could you explain your belief?
[A]uthentication is of high priority in . . . public news groups.
As we've discussed here, authentication in areas where free speech
flourishes may damage our society greatly. It certainly will chill free
speech. Could you explain why you feel this is a "high priority"?
Most likely, their answers would depend on whether they are considering
how they would use PEM themselves versus how they see PEM being used more
broadly.
It turns out respondents are talking to actual prospective customers,
instead of guessing. For example: "I believe the dominant market for PEM
is for privacy (based on discussions with potential customers). I have
found real customers with actual applications where trust is the dominant
requirement. In that context non-repudiation was crucial. But these are
a distinct minority."
Doug Porter