17 Dec
2003
17 Dec
'03
11:17 p.m.
From: wcs@anchor.ho.att.com (bill.stewart@pleasantonca.ncr.com +1-510-484-6204) Trusting someone else's verification is less than ideal security policy :-) But likewise, preventing folks from letting someone else (their legal agent) perform verification for them is a less than ideal political policy. There are going to be lots of good reasons (mostly of cost) to use agency relationship for security. It would be profitable to characterize the threats and come up with some solutions rather than to deny that these things will happen. Eric