CVS update: openprivacy/htdocs/notes

From: cvs@openprivacy.org
Date: Wed Oct 18 2000 - 14:36:00 PDT

Date: Wednesday October 18, 19100 @ 14:36
Author: fen
CVSWEB Options: -------------------

Main CVSWeb: http://openprivacy.org/cgi-bin/cvsweb/cvsweb.cgi

View this module: http://openprivacy.org/cgi-bin/cvsweb/cvsweb.cgi/openprivacy/htdocs/notes

-----------------------------------

Update of /usr/local/cvsroot/openprivacy/htdocs/notes
In directory openprivacy.org:/home/fen/projects/openprivacy/htdocs/notes

Modified Files:
        security.txt
Log Message:
added some QandA at bottom

*****************************************************************
File: openprivacy/htdocs/notes/security.txt

CVSWEB Options: -------------------

CVSWeb: Annotate this file: http://openprivacy.org/cgi-bin/cvsweb/cvsweb.cgi/openprivacy/htdocs/notes/security.txt?annotate=1.3

CVSWeb: View this file: http://openprivacy.org/cgi-bin/cvsweb/cvsweb.cgi/openprivacy/htdocs/notes/security.txt?rev=1.3&content-type=text/x-cvsweb-markup

CVSWeb: Diff to previous version: http://openprivacy.org/cgi-bin/cvsweb/cvsweb.cgi/openprivacy/htdocs/notes/security.txt.diff?r1=1.3&r2=1.2

-----------------------------------

Index: openprivacy/htdocs/notes/security.txt
diff -u openprivacy/htdocs/notes/security.txt:1.2 openprivacy/htdocs/notes/security.txt:1.3
--- openprivacy/htdocs/notes/security.txt:1.2 Tue Sep 26 17:55:49 2000
+++ openprivacy/htdocs/notes/security.txt Wed Oct 18 14:36:00 2000
@@ -1,6 +1,6 @@
 security.txt
 
-$Id: security.txt,v 1.2 2000/09/27 00:55:49 fen Exp $
+$Id: security.txt,v 1.3 2000/10/18 21:36:00 fen Exp $
 
 Security in Aglets
 URL: http://docs.openprivacy.org/aglets1_1/spec11.html#Security
@@ -37,3 +37,12 @@
 "What we intuitively call security is really made up of three things:
 keeping objects secret, protecting objects from modification, and preventing
 the miss-use of objects."
+
+Q: secure communication between agents
+A: sign - prevents forgery
+ encrypt - prevents eavesdropping
+
+Q: how do we handle secret key of on-line agents?
+A: consider all remote agents suspicious
+ only yours - that you have the key for - is fully trusted at first
+ others can gain trust through reputataion

This archive was generated by hypermail 2b30 : Mon Jan 22 2001 - 15:52:14 PST