Assumpte: A better approach to security
Arxiu de la llista
- From: "Bob Harman" <bob AT bharman.com>
- To: "A better approach to security" <cacert AT lists.cacert.org>
- Subject: Re: [CA cert] How to change info in database?
- Date: Sat, 7 Aug 2004 15:00:06 -0500 (CDT)
- Importance: Normal
- List-archive: <http://lists.cacert.org/mailman/private/cacert>
- List-id: A better approach to security <cacert.lists.cacert.org>
Duane said:
> Larry J. Riffle wrote:
>
>> I have to disagree. Speaking as somebody whose legal name is "Larry" not
>> "Lawrence" the db really should exactly match the id. There is a
>> "Lawrence J. Riffle". I've met him. He's not me. Its not safe to assume
>> that Larry is Lawrence or that Chris is Christopher.
>
> Which brings us to a very important point, names whether shortened or
> not aren't unique. While my name is uncommon I bet if I looked long and
> far enough I'd find another person with the exact same name, then of
> course there is the whole "George Bush Sr" and "George Bush Jr" thing
> where names are passed on in families...
>
> The differentiating factor is the date of birth, while the likelihood of
> name duplications, the chance of having an exact same birth date as well
> is exponentially less...
>
> Which is why a form of national govt issued ID was asked for as well, if
> they all match I doubt if the name being shortened or not will make
> little difference...
>
> --
>
> Best regards,
> Duane
But you could take name differences to the extreme, like getting a
certificate that says I'm "dotBob" or even "Santa Claus", but acquired
using my real identifiers (birth date, ID#, etc). To a bank that uses
such keys for online banking (like some banks do in Venezuela, where just
anonymous SSL isn't enough security for them), the key might not be
accepted, no matter how valid it might be for CAcert to create.
.bob
- [CA cert] How to change info in database?, Larry J. Riffle, 08/06/2004
- [CA cert] Re: How to change info in database?, J. Wren Hunt, 08/06/2004
- Re: [CA cert] How to change info in database?, Michael Daigle, 08/06/2004
- Re: [CA cert] How to change info in database?, Duane, 08/06/2004
- <Possible(s) missatge(s) del fil>
- [CA cert] How to change info in database?, Larry J. Riffle, 08/07/2004
- Re: [CA cert] How to change info in database?, Duane, 08/07/2004
- Re: [CA cert] How to change info in database?, Bob Harman, 08/07/2004
- Re: [CA cert] How to change info in database?, Duane, 08/07/2004
Arxiu generat per MHonArc 2.6.16.