Re: I intend to have a document ready for Atlanta on this subject.

Derek Atkins <[email protected]> 04 Oct 2002 13:09:53 -0400
Newsgroups gmane.comp.security.key-distribution
Message-ID <[email protected]>
Richard Shockey <[email protected]> writes:

> Your security point is well taken however fewer indirections are a
> "good thing" but I will trade that for a more diverse and distributed
> infrastructure.

And herein lies the problem.  When designing a protocol for security
infrastructure, you cannot trade off security.  Well, I suppose you
_can_, but then you're just doing a disservice to yourself and your
users.

-derek

-- 
       Derek Atkins
       Computer and Internet Security Consultant
       [email protected]             www.ihtfp.com