Re: Draft IP-Bill enters wrap-up phase

On 24 Jan 2016, at 15:27, Roland Perry <[email protected]> =
wrote:

> In article <D8889865-1033-46F4-82B6-50EDF78D7AFE-3A7p0BNfWfcdnm+yROfE0A@public.gmane.org>, Roger =
Hayter <[email protected]> writes
>=20
>> AMI, how are the keys for end-to-end users supplied?
>=20
> Is this relevant (I don't know for sure, but as someone formerly =
practising in Wales maybe you have some inside track):
>=20
> http://www.wales.nhs.uk/pearsrc/digitial_certificate_setup.pdf
> --=20
> Roland Perry

I was never important enough to be advised to do such a thing. It does =
seem remarkably simple, but raises more questions.  Does it use the same =
SSL libraries as used for encrypted web sites?  If Thawte issue a =
certificate which you then use, does this potentially give them a way =
into your encrypted information or not?  And is this the same system the =
English NHS use for end-to-end encryption?  It would seem to render =
NHSnet irrelevant, unless its sole role is to prevent you sending =
encrypted email or secret documents outside NHSnet.=20