[8796] in cryptography@c2.net mail archive
Re: use of digital signatures and PKI
daemon@ATHENA.MIT.EDU (Lynn.Wheeler@firstdata.com)
Mon Jun 4 11:17:36 2001
To: Don Davis <dtd@world.std.com>
Cc: cryptography@wasabisystems.com,
=?iso-8859-1?Q?G=F3cza_Zolt=E1n?= <goczaz@nextramail.hu>
From: Lynn.Wheeler@firstdata.com
Date: Mon, 4 Jun 2001 08:08:08 -0700
Message-ID: <OF7C21DD3B.7E82277A-ON88256A61.0052C931@fdcsg.1dc.com>
MIME-Version: 1.0
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: quoted-printable
that has been my assertion for a couple years ... that at least 99.9999=
999%
of all cert events that go on in the world today are SSL events for
establishing session keys ...
random ref:
http://www.garlic.com/~lynn/subtopic.html#sslcerts
Don Davis <dtd@world.std.com>@wasabisystems.com on 05/31/2001 08:07:14 =
PM
Sent by: owner-cryptography@wasabisystems.com
To: cryptography@wasabisystems.com
cc: G=F3cza Zolt=E1n <goczaz@nextramail.hu>
Subject: Re: use of digital signatures and PKI
i have one potent, anecdotal data point: a friend of mine is a 3-lette=
r
executive at one of the older/bigger PKI vendors. he surprised me in a=
recent conversation, by mentioning that essentially none of his company=
's
customers are using PKI for signatures. actually, he may have said, "
_no-one_ is using PKI for signatures." he says that practically all of =
the
certs are being used for negotiating symmetric session-keys.
- don davis, boston
=
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@wasabisystems.com