A better approach to security

["Sam Johnston" <samj AT samj.net>]

On 31 Mar 2008 12:09:45 +0200, Johan Vromans <jvromans AT squirrel.nl> wrote:

Maybe a CAcert service where you can search for certificates, and
where certificate owners can upload a picture?

 

Or better yet, a more general assurance service where other verifiable and ideally immutable attributes (DoB, picture, height, eye colour, graduation, etc.) could be assured as well, and selectively exposed in certificates, via a web based profile, via protocols like SAML and OpenID, etc.

The need for reputation and assurance is clear and increasing while the need for x509 certificates specifically is unclear (and if the stats were to be believed, declining with a 2006 peak) We already have at least two 'presentations' of our assurance database: x509 and pgp... I for one would love to see OpenID added to that list.

Sam