FW: [Dundi] DUNDi popularity

Michael Richardson mcr at sandelman.ottawa.on.ca
Fri Oct 13 09:24:11 MST 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


>>>>> "Anders" == Anders Brownworth <abrownworth-dundi at bandwidth.com> writes:
    Anders> It seems to me an IP might be too little to go on. I suppose
    Anders> an X.509 encryption layer in the protocol would remove any
    Anders> ambiguity, but then we forfeit some of the distributed
    Anders> nature of the system because we would require a certificate
    Anders> authority. But without a central authority of some sort,
    Anders> it's hard to see how we could eliminate error or fraud by
    Anders> purely technical means. Might be interesting to get a number
    Anders> of entities with 
    Anders> SS7 presence to validate possibly on an ongoing basis. I hate
    Anders> centralized, but...

  You need the PGP model instead.
  Every DUNDi node needs to be a CA/signer. You can have web-of-trust.

  You may also want to look at SPKI:
  (Rivest= R of RSA, Ylonen=SSH)

2692 SPKI Requirements. C. Ellison. September 1999. (Format: TXT=29569
     bytes) (Status: EXPERIMENTAL)

2693 SPKI Certificate Theory. C. Ellison, B. Frantz, B. Lampson, R.
     Rivest, B. Thomas, T. Ylonen. September 1999. (Format: TXT=96699
     bytes) (Status: EXPERIMENTAL)

- -- 
]            Bear: "Me, I'm just the shape of a bear."          |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Finger me for keys

iQEVAwUBRS+9p4CLcPvd0N1lAQIegwf/Z3ndlch9N3Z+2P4O3A94f8h1PMsK0GrH
tusTDjFY3KfsJdn4Tvm22oAIeQQB3IQPb2n0Z3tTTFHPs+LjcNA62gcPHllJDwDT
MDruv9Dzo8FZrRq82xlFjIQ1tEPLciR7gNpzN7vBrcFzaLLKf4I3eQ8c/c+Bc4j8
DOuWb40B7Mrcvv4i10AzQqnXELxdKQcPICvvU6JGfHinzaeX18uifebwJFp/gAMA
O9mWns7YTzmsK87FI9Fu8MfIaIoKoDm8tgZWLjEzeBuy1jssfDgxpRvRBbMBidvG
SQZTi50RvZDeKdg2nkmczwnLsimm64Yj5yXCn1FiwaP+spgQMFPkpA==
=3TZp
-----END PGP SIGNATURE-----


More information about the Dundi mailing list