pem-dev
[Top] [All Lists]

Re: summary of technical issues

1994-12-23 09:56:00

Hey! 
I hope it's not to late for me to reply.
Anyway, here's some considerations

Galvin wrote:

1. Suggestion to require key selector to be the public key

  Currently the key selector may be chosen arbitrarily (within
  specified functional constraints) by the owner of a public
  key.  It has been suggested this generality is unnecessary and puts
  undue burden on implementors.

There is another question, related with this suggestion: imagine i want
to "hide" my public key, in order to give it only to "selected users" ?
This is a valid method to increase security in the exchange of 
information between specifics users. Introducing the public key as a the key
selector removes this possibility.

If i may do so, i would like to suggest the use of the last bytes ( 8
or 16) as the key identifier, like PGP does. It's unique and doesn't
unveil the public key.

Vitor Fernandes <vitor(_at_)di(_dot_)uminho(_dot_)pt>


<Prev in Thread] Current Thread [Next in Thread>