Re: the curse of the S(imple) protocols, was: Re: e2e

["Steven M. Bellovin" <smb at cs.columbia.edu>]

On Fri, 17 Aug 2007 15:50:48 +0200
Iljitsch van Beijnum <iljitsch at muada.com> wrote:

> 
> Then again, misspelled fishing would be an order of magnitude harder
> if banks and retailers started using S/MIME, which is widely
> implemented today, 

S/MIME would be a fine start.  It also won't solve the problem until
someone develops a user interface that DTRT for naive users who don't
understand trust anchors, the difference between authentication and
authorization, or how to distinguish myfinancialcompany.com from
myfinancia1company.com when both have valid certificates.


		--Steve Bellovin, http://www.cs.columbia.edu/~smb

_______________________________________________
Ietf mailing list
Ietf at ietf.org
https://www1.ietf.org/mailman/listinfo/ietf