Re: [Strint-attendees] initial cut at a recommended reading list for STRINT workshop

[Dave Crocker <[e-mail]>]

> Yes sorry, I forgot the server uses a certificate from the
> www.cacert.org  CA. Unless you manually add that CA as trusted in your
> browser, you'll have to accept the certificate warning.


This highlights a core human factors (or worse) problem with typical 
models involving cert.

So, any proposal for global privacy improvement that includes a crypto 
mechanism needs to account for these sorts of well-established, 
long-standing problems, along with the rest of the challenges in doing 
key management.

Hint:  The realities of scaling to the real world of the Internet means 
that an acceptable solution will not rely on having average users -- and 
very possibly not even IT professionals -- doing cert administration (or 
maybe even much key administration).

d/

ps. in case anyone misinterprets the above, it was not directed at -- or 
about -- Kai but at the current nature of this stuff.  Kai's forgetting 
was, in my view, not his error but rather an error in the system's design.

-- 
Dave Crocker
Brandenburg InternetWorking
bbiw.net