[Discuss] root CA bloat

Derek Martin invalid at pizzashack.org
Tue Nov 25 16:31:33 EST 2014


On Tue, Nov 25, 2014 at 04:18:34PM -0500, Richard Pieri wrote:
> On 11/25/2014 3:56 PM, Derek Martin wrote:
> >Oh, right, just like the web of trusted certificate authorities.  It's
> >a solved problem, so we really don't need to continue this discussion!
> 
> Certificate authorities are not webs of trust. They are the opposite
> of webs of trust.

Yes, that was my point.  Social networks are not either... unless you
think someone who has over 1,000 friends on facebook actually
completely trusts every one of them.   The problem is not solved.  It
is just ignored by most people.

Webs of trust also only go so far, and it is one thing to be someone's
friend, and a very different thing to trust them with all of your
money.  And even if I might trust particular friends with all my
money, that does not constitute a good reason for YOU to trust them
with all of YOUR money.

-- 
Derek D. Martin    http://www.pizzashack.org/   GPG Key ID: 0xDFBEAD02
-=-=-=-=-
This message is posted from an invalid address.  Replying to it will result in
undeliverable mail due to spam prevention.  Sorry for the inconvenience.



More information about the Discuss mailing list