[TrustBar] [Fwd: Re: Low assurance SSL CAs]

[Ian G]

Duane wrote:

> Ian G wrote:
>
>> Assume N levels of "trust".  Instead of directly
>> looking at that, can you suggest anwhere where
>> such a scheme exists?
>>
>> Is there an analogue?  More points if the scheme
>> is run outside the 'public sector' a.k.a. government
>> and outside any other centralised agency.
>
>
> bit hard to make direct comparisons with this since email doesn't 
> generally exist off the net...
>
> but yes there are similar systems...
>
> signing up to a university course in Australia requires minimum levels 
> of ID checking...
>
> signing up for a drivers license needs a little more
>
> signing up for a passport generally requires more
>
> signing up for a bank account leverage's passport and drivers license 
> or other govt id...


No, I'd say not.  Each of those systems use their
own metrics, you can't generally rate them as
1 - n.

In fact, each go to a great extent to decide on
their own ways of doing things, so much so that
often, due diligence from one place is worthless
in another place.

Also, bear in mind that for examples 1, 4, the
relying party is the institution doing the checking,
whereas for CAs, the relying party is some other
user.  So one could look at DLs and passports,
but they are government run.

iang

-- 
News and views on what matters in finance+crypto:
        http://financialcryptography.com/