[43927] in Cypherpunks
Re: Cypherpunk Certification Authority
daemon@ATHENA.MIT.EDU (Adam Shostack)
Sat Nov 25 16:05:43 1995
From: Adam Shostack <adam@homeport.org>
To: froomkin@law.miami.edu (Michael Froomkin)
Date: Sat, 25 Nov 1995 16:05:28 -0500 (EST)
Cc: cypherpunks@toad.com (Cypherpunks Mailing List)
In-Reply-To: <Pine.SUN.3.91.951125150446.848J-100000@viper.law.miami.edu> from "Michael Froomkin" at Nov 25, 95 03:20:23 pm
| C) Don't settle for less than X.509 ver 3, because this allows the
| certificate to carry within it a reference to the location of the CRL
| list. Use that feature.
Does X.509 version 3 fix the problem that Ross Anderson points
out in his 'Robustness Principles' paper? (Crypto '95 proceedings, or
ftp.cl.cam.ac.uk/users/rja14/robustness.ps.Z)
Its an excellent paper, well worth reading, but the basic
problem is that X.509 encrypts before signing.
Adam
--
"It is seldom that liberty of any kind is lost all at once."
-Hume
