Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: What happened to dot pro... (BTW)

  • From: John R Levine
  • Date: Sun Feb 01 23:51:46 2004
  • Cleverness: None detected

> an out of band method (phone, in person, business card). I don't see how
> a limited access domain helps in binding keys to people, unless the
> registrars are going to start acting as CAs as well. Anyone can create a
> PGP key with trustme@fubar.cpa.pro as an associated email address.

The .pro website said they were going to do certs, but at this point it
seems unlikely that they'll do anything.

It's somewhat harder (not impossible, somewhat harder) to get a
bogus S/MIME cert since the issuers all do at least perfuntory mailback
verification.

Regards,
John Levine, johnl@iecc.com, Primary Perpetrator of "The Internet for Dummies",
Information Superhighwayman wanna-be, http://iecc.com/johnl, Sewer Commissioner
"I dropped the toothpaste", said Tom, crestfallenly.




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.