Problems with PKI

• Trust the Certificate Authority?

  • Banks have a problem with this
  • $25 in the mail to Verisign

• Revocation is still, truly, unsolved

• X.509 is “people centric”

  • Authenticates identity, but not authority to perform action

• X.509 isn’t flexible enough

• (look at SDSI, SPKI)

Previous slide

Next slide

Back to first slide

View graphic version