Re: [Auth]Authorization Certificates

[Vinko Vrsalovic B.]

> * this can all be handled automatically, so to be virtually seamless to
> you and everyone else.
> take the above, but instead of end users, have them as servers. servers
> have certificates, and these certificates are trusted by banks, other
> servers, other organizations, etc. and when other servers or users deal
> with these certified servers, they find 'links of trust' from people
> they trust to these servers.

Can the links be identified?

Can you tell the user that the place is where he is trying to obtain
X is trusted by A, B and not D?

And can you tell the server that the user X is trusted
by servers A, B and not D?

I think that if PKI is going to be the one, you must tell
people who trust who, so they can make choices based on that.

-- 
V. <address@hidden>