<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
There are only two good ways to provide man-in-the-middle resistant
authentication with key repudiation in a distributed system - using a
completely trusted out of band channel to manage everything, or use a
PKI. I've used PKI for >100k node systems, it works great if you
keep it simple and integrate your CRL mechanism - in a distributed
system the pieces are all already there! I think some people are put
off by the size and complexity of the libraries involved, which doesn't
have to be the case - I've got a complete RSA/DSA X.509 compliant cert
based PKI (leveraging LibTomCrypt for crypto primitives) in about 2k
lines of C++, <30k object code, works great (I'll open that source
as LGPL when I deploy next year...) The only hard part about
integrating into a p2p network is securing the CA's, and that's more of
a network security problem than a p2p problem...<br>
<br>
Kerry<br>
<br>
<a class="moz-txt-link-abbreviated" href="mailto:zooko@zooko.com">zooko@zooko.com</a> wrote:
<blockquote cite="mid20051026212425.03F781E0B@yumyum.zooko.com"
type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">And if they do, then why reinvent the wheel? Traditional public key
signing works well for these cases.
</pre>
</blockquote>
</blockquote>
<pre wrap=""><!---->...
</pre>
<blockquote type="cite">
<pre wrap=""> Traditional public key signing doesn't work well if you want to
eliminate the central authority / trusted third party. If you like
keeping those around, then yes, absolutely, traditional PKI works
swimmingly.
</pre>
</blockquote>
<pre wrap=""><!---->
Where is the evidence of this bit about "traditional PKI working"? As far as
I've observed, traditional PKI works barely for small, highly centralized,
hierarchical organizations and not at all for anything else. Am I missing some
case studies of PKI actually working as intended?
Regards,
Zooko
_______________________________________________
p2p-hackers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:p2p-hackers@zgp.org">p2p-hackers@zgp.org</a>
<a class="moz-txt-link-freetext" href="http://zgp.org/mailman/listinfo/p2p-hackers">http://zgp.org/mailman/listinfo/p2p-hackers</a>
_______________________________________________
Here is a web page listing P2P Conferences:
<a class="moz-txt-link-freetext" href="http://www.neurogrid.net/twiki/bin/view/Main/PeerToPeerConferences">http://www.neurogrid.net/twiki/bin/view/Main/PeerToPeerConferences</a>
</pre>
</blockquote>
<br>
</body>
</html>