Trustworthy contacts
Dave Bird
ukcrypto at maillist.ox.ac.uk
Thu, 14 Sep 2000 21:45:34 +0100
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
In article <3.0.5.32.20000914065058.0083ccc0@spiritone.com>, Carl
Ellison <cme@acm.org> writes
>At 07:08 PM 9/9/00 +0100, David Hansen wrote:
>>On 9 Sep 00, at 11:12, George Foot wrote:
>>> which has lamentably been seized upon by
>>> energetic but shortsighted interests as a basis for a e-commerce
>>> framework which has been enshrined in law before it has been tested in
>>> practice.
>>
>>The alternative to a public key system for e-commerce would be a
>>secret key system. I doubt very much if key management could be done
>>with such a system.
>
>This is a false comparison. The flaw in PK systems isn't the cryptography
>but the human behavior around it. The use of names, for example, breaks
>down when the number of named things exceeds 2 raised to the entropy of the
>names people can effectively use (remember, type accurately, etc.) or, in
>cases of directory operations (or PKIs), exceeds the square root of that
>limit because of the birthday paradox.
I would have thought these problems would be solved as in the everyday
world. I manage a large number of names. I use a card-file to extend
my human memory. As in computer programming, I also extend the
capacity by using separate name-spaces for different purposes e.g.
email, conventional, perhaps for particular newsgroups or activities.
The only way I can personally manage a lot of names or documents is
to split them up hierarchically into the various functions they
associate with.
- --
^-^-^-@@-^-;-^ http://www.xemu.demon.co.uk/
(..)__u news:alt.smoking.mooses
happy as a clam at high tide -. <_" .-._.-.
-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1
iQA/AwUBOcE47n8v/Y5zkfRPEQJQjgCgoIx4iXfHz/om6vz8njBFUaR8VmEAoPOU
X5c7g1P+XXuUXcGiMeKADIXF
=E5DO
-----END PGP SIGNATURE-----