Skip to content

Entries from November 2010

Overcoming Distrust in CAs Using External Quality Enforcement

A few weeks ago, I wrote about the inherent limitations of the certification model. This model cannot be expected to provide a solution to the binding of entities to public keys, primarily because Certification Authorities (CAs) have no financial incentive in performing thorough investigation on who they issue certificates to; and often on the contrary.

There is probably more than one solution to this problem. Let us examine one of them:
External quality enforcement

Continue reading "Overcoming Distrust in CAs Using External Quality Enforcement"