Tuesday, September 18, 2007

Bootstrapping trust

Who do you trust and for what realms?
This is one of the key issues of security... do you trust every root certificate for your browser? (There are ~43 builtin root certificates in firefox)
How can you trust the first ssh connection to a new host?
And what about context? some of the people you know can good very good recomendations but only on some contexts. At the ANML we are helping develop a tool Nettrust to help users make some decitions while browsing the web. An alpha release of this tool is Available here.

No comments: