Re: IESG meeting thoughts

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Responding to Stephen.

Crypto doesn't actually solve any of your security problems. Not one, zilch, zero.

What cryptography does is to reduce the size of your information security problem. It can reduce it in size from megabytes or even terrabytes to a 128 bit key or deciding whether or not to trust one of millions of Web sites to whether or not to trust the 50 WebPKI CAs (or ICANN if you are feeling really brave). But that is all cryptography does for you. It reduces the size of your security problem.

You still have to work out how to keep that key secure or make sure you have the right trust anchor. Reducing problems in size is good but you still have to solve them.

[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]