Re: user security handbook change list

[Klaus-Peter Kossakowski <[e-mail]>]

Hi Erik,

I agree with your changes and suggestions beside the points
that follows ... As they are only in the glossary, consider
them minor.

Hey, seems the USH nearly made it :)

Best regards,
	Peter


> 7. Glossary changes:
>
>	b. Authentication
>
>	   this term is required.  How about:
>
>***	   Authentication refers to mechanisms which are used to determine
>***	   the identity of someone.  Authentication typically requires a
>***	   name and a password to be supplied.

		... refers to mechanisms which are used to prove
		the identity ...

		determine is too weak from my understanding. It is really
		that someone can prove that the identity he claims to be
		really is he (very bad english, sorry)

>	c. Certificate
>
>	   we need a vernacular, not technical explanation here.  How
>	   about:
>
>***	   A certificate is used to verify Digital signatures.  Say an
>***	   Email message contains a digital signature that says "I am 
>***	   from Bob."  Bob's certificate is used to verify that the 
>***	   digital signature is correct.

		A certificate is a digital signature on a public key
		of a user. Say an Email message contains a digital signature
		that says "I am from Bob." Bob´s key is used to verify that
		these digital signature is correct. But without getting the
		key from Bob directly, users have to rely on certificates
		certifying that the key actually belongs to Bob.


Klaus-Peter Kossakowski, Germany
Phone: (+49) 0171 / 5767010  Fax: [phone] / 729420
[e-mail]                  PGP: 0x38B56E3D/2048/RSA