On Mon, Dec 08, 2003 at 01:36:09PM -0500, Meng Weng Wong wrote:
|
| On Mon, Dec 08, 2003 at 05:21:46AM -0800, Hallam-Baker, Phillip wrote:
| |
| |
| | The cost of a ca issued cert is policy enforcement.
| |
|
| To expand on the idea of policy enforcement:
|
| Judging the people who pay you money is not a tidy business model. It
| may be better for a business to focus on providing reputation services
| rather than coupling reputation to certificates.
|
Sorry for the long rants; I am a plodder.
I guess what I'm really saying is that if VeriSign wants to sell
people certs for domainkeys, they should; but they should not revoke
those certs even if they turn out to be spammers. A reputation system
is still needed.
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.txt
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡