[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Trust and Transitivity
On Thu, 22 May 1997, Ken Rowe wrote:
-> I agree, trust is transitive.
-> When looking at the trust relationships in a system you need to
-> consider whether you have transitive closure. This is especially
-> true for "certificates."
Ken:
It is not. So I do not repeat the arguments, since you are in the
list, please read my msg to Tony and list and then we talk after that.
Thank you,
Ed Gerck
->
-> Ken.
-> ===
-> At 04:53 PM 5/22/97 -0700, Tony Bartoletti wrote:
-> >Ed Gerck wrote "However, trust is not transitive."
-> >
-> >I believe that, functionally speaking, trust IS transitive, in as much as we
-> >speak to the limited domains of trust represented by signed (auth tag) certs.
-> >
-> >When I sign your key with the tag X, I am saying that I trust you to be
-> >(honest, knowledgeable, use-good-judgement) in matters of X. I may not
-> >trust Khaddafi in such matters, or think that I do not, but if YOU do and
-> >you are basing your actions on his behalf, than I am implicitly trusting
-> >Khaddafi. Had I known that you get your direction from Khaddafi, I might
-> >not have placed trust in you in the first place, but that is a another issue.
-> >
-> >My two cents.
-> >
-> >___TONY___
-> >
-> >
-> >
-> >
->
______________________________________________________________________
Dr.rer.nat. E. Gerck egerck@laser.cps.softex.br
http://novaware.cps.softex.br
P.O.Box 1201, CEP13001-970, Campinas-SP, Brazil - Fax: +55-19-2429533
References: