# BLU Discuss list archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

# [Discuss] Why the dislike of X.509?

*Subject*: [Discuss] Why the dislike of X.509?*From*: warlord at MIT.EDU (Derek Atkins)*Date*: Tue, 26 Aug 2014 13:07:29 -0400*In-reply-to*: <53FCA1DD.60604@gmail.com> (Richard Pieri's message of "Tue, 26 Aug 2014 11:03:57 -0400")*References*: <53F9F6B9.4060505@stephenadler.com> <20140824161132.GE14848@randomstring.org> <be314521ab6bebb6add54d706b042f01.squirrel@mail.mohawksoft.com> <53FA1C3B.70908@gmail.com> <53FB19E5.4080602@aeminium.org> <53FB4A5D.2030305@gmail.com> <CA+h9Qs5GnC6d1ejBQC=crtHwxoDiFWo4Kn+xjt0eiA8Kr733_A@mail.gmail.com> <53FB70E6.50706@gmail.com> <CA+h9Qs5THPNEir7tLZNjzLWMpod=9UGWTSCeZS2nCwVY0Ox=-w@mail.gmail.com> <53FB7F0A.40105@gmail.com> <253113e101a6fc1b75e160dfbd3d0dbe.squirrel@mail.mohawksoft.com> <53FB9325.9010200@gmail.com> <a7c1366d330261e2ee4906c8d08d0b94.squirrel@mail.mohawksoft.com> <53FB9E7A.5030808@gmail.com> <946844bdd8420720147712d216f1c037.squirrel@mail.mohawksoft.com> <53FCA1DD.60604@gmail.com>

Richard Pieri <richard.pieri at gmail.com> writes: > On 8/26/2014 10:37 AM, markw at mohawksoft.com wrote: >> *any* shared or distributed authority has the same issue. > > Shared is not distributed. Shared means more than one entity has > authority. Each entity is a point of compromise for the entire system. > > Distributed means no single entity has authority; a quorum or a > unanimous consensus is required. Compromise of one entity does not > compromise the entire system. So where does DNS come in? I think most DNS experts would define it as a "distributed" system. However there *is* a single entity that has authority -- the root servers. Compromise of that would compromise the whole DNS system. However there are watchdogs all over the world whose role is preventing that. I would argue that it's not a clear dichotomy between "shared" and "distributed". -derek -- Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory Member, MIT Student Information Processing Board (SIPB) URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH warlord at MIT.EDU PGP key available

**Follow-Ups**:**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**References**:**[Discuss] vnc***From:*adler at stephenadler.com (Stephen Adler)

**[Discuss] vnc***From:*dsr at randomstring.org (Dan Ritter)

**[Discuss] vnc***From:*markw at mohawksoft.com (markw at mohawksoft.com)

**[Discuss] vnc***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] vnc***From:*nuno at aeminium.org (Nuno Sucena Almeida)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*jabr at blu.org (John Abreau)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*jabr at blu.org (John Abreau)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*markw at mohawksoft.com (markw at mohawksoft.com)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*markw at mohawksoft.com (markw at mohawksoft.com)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*markw at mohawksoft.com (markw at mohawksoft.com)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

- Prev by Date:
**[Discuss] Why the dislike of X.509?** - Next by Date:
**[Discuss] Why the dislike of X.509?** - Previous by thread:
**[Discuss] Why the dislike of X.509?** - Next by thread:
**[Discuss] Why the dislike of X.509?** - Index(es):