 nwrickertsand groperPremium,MVM
join:2004-09-04
Geneva, IL
kudos:7
 ·AT&T U-Verse
| This is not really a surprise.
The X.509 system appears to have been designed with the primary goal that of earning income for CA (certificate authorities). It's a rotten design.
It's time for the system to be redesigned. I'll suggest that web server developers and browser developers start coming up with an alternative based on PGP keys, as an alternative to X.509 certificates.
The basic problem is that the X.509 hierarchical trust model does not fit the real world. While PGP is not perfect, its "web of trust" at least is a better fit.
--
AT&T dsl; Westell 327w modem/router; openSuSE 11.0; firefox 3.0.5 |
