[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: AW: self-signed TSA [Was Re: Private Key Cloning]

Rich Salz wrote:

>> I'm not sure I understand your statement of having "*less* to trust".
> 
> Sorry, poorly worded.
> 
> If I trust the CA that certifies a TSA, then aren't I (by default, and
> certainly by philosophy) trusting EVERY certificate that CA issues?
> Why should I have to?

You shouldn't have to, although this is the model that most public CAs seem
to push and/or encourage. As I mentioned, a possible solution is the the use
of "anchor certificates".

Regards,
Aram Perez