The selection of the head-dress depends not only from the kind, structures and the length of hair, but first of all from the shape of the face. Besides the hairdresser returns still the attention on her outlines, the binding of eyes or the complexion.
|
examples of comparative negligence The role of trust in certification (1 viewing) (1) Guests
Favoured: 0
|
|
|
TOPIC: examples of comparative negligence The role of trust in certification
|
|
|
|
examples of comparative negligence The role of trust in certification
|
|
|
I don't need to corrupt the entire bank in order to adjust your account balance, a single corrupt clerk (or perhaps branch manager) can do it. Of course, there's a good chance that eventually, come audit time, this will be caught
|
|
|
|
|
|
|
The administrator has disabled public write access. |
|
|
|
examples of comparative negligence The role of trust in certification
|
|
|
In any certification system, what makes a certificate trustworthy is not any magically infused trust from the certificate's issuer (eg, the CA). Rather, a certificate is trustworthy as decided by the user (ie, the party that relies on the information
|
|
|
|
|
|
|
The administrator has disabled public write access. |
|
|
|
examples of comparative negligence The role of trust in certification
|
|
|
So my hope is that banks become the certification authorities. Recall that at least in the us banks used to have trust as their middle name xyz bank and trust co for example. The whole banking system is _base_d on trust. You trust the bank to pay your checks, because they are intrinsically worthless. It seems that the digital signature issue and certificates are not really much of a stretch from that. We have the procedures in place to handle this. The problem I see with banks becoming CAs is that at some point you are going to want a customer at Bank A to do business with a merchant who is a customer of Bank B. This is where the trusted third party is useful, somehow Bank B has to know that (a) the certificate signed by Bank A is real and (b) that Bank A is a trustworthy inividual to sign the certificate in the first place. My understanding is that the TTP will be the body that allows this, banks will most certainly be CAs but there will still need to be a body above them. Just my AUD$0.02
|
|
|
|
|
|
|
The administrator has disabled public write access. |
|
|
|
examples of comparative negligence The role of trust in certification
|
|
|
This is unclear. A trusted authority, at least within my limited scope, has been defined as a large organization (as opposed to an individual), or a provably secure software agent. So the man-in-the-middle attack is certainly possible, but a whole host of people have to be in on the scam. I don't think that this necessarily follows; simply because an organization *is* large means, by definition, that only a small fraction of its personnel/capabilities are required to perform any particular operation. This is probably true most organizations, but is not true by definition. I don't need to corrupt the entire bank in order to adjust your account balance, a single corrupt clerk (or perhaps branch manager) can do it. Of course, there's a good chance that eventually, come audit time, this will be caught
|
|
|
|
|
|
|
The administrator has disabled public write access. |
|
|
|
examples of comparative negligence The role of trust in certification
|
|
|
The consolation is that a thorough audit trail actually gets people their money back! I don't know but I wonder whether an audit trail is similarly easily and effectively to be carried out in banks and trust centres. M. K. Shen
|
|
|
|
|
|
|
The administrator has disabled public write access. |
|
|
|
examples of comparative negligence The role of trust in certification
|
|
|
Comments are welcome. The following is not comments but simply reproduction of some informations that could be of interest. The German newspaper Sueddeutsche Zeitung 17 Feb says that certain trust centres will be represented in the CeBIT in Hannover, that this sommer will see some 20 such bodies and that these, operating within the _frame_work of German laws and regulations on signatures, are all expecting to be able to make huge business. The newspaper further says that there are currently some difference in opinions between experts of the government and the centres, with the former favouring key escrew while the latter against. M. K. Shen ______________________________________________________
|
|
|
|
|
|
|
The administrator has disabled public write access. |
|
|
|
|
 |
|
