Re: [Auth]Re: What I percieve is wrong with IDsec (was IDsec specification draft)

[Mike Warren]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hans Zandbelt <address@hidden> writes:

> The solution that IDsec can offer: your profile data may contain a
> certificate that is signed by the mutually trusted third party .
> 
> As you mention yourself, it is required that some mutually
> trustworthy third party exists in this scenario; otherwise such a
> scenario is not possible, with or without IDsec.

Should IDsec account for such a possibility and build it into the
specification? Should IDsec make it obvious to users (both client and
server) when data is signed or not?

- -- 
address@hidden
<URL:http://www.mike-warren.com>
GPG: 0x579911BD :: 87F2 4D98 BDB0 0E90 EE2A  0CF9 1087 0884 5799 11BD



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.5 and Gnu Privacy Guard 
<http://www.gnupg.org/>

iD8DBQE8P2TmEIcIhFeZEb0RAg7BAKC6B67hDDOmTf/gmrYBHU09LbHngACeJtEx
YtpjQAyargb+mVyW092HP28=
=ewti
-----END PGP SIGNATURE-----