Received-SPF: pass (sog-mx-1.v43.ch3.sourceforge.com: domain of gmail.com
	designates 209.85.214.173 as permitted sender)
	client-ip=209.85.214.173; envelope-from=mh.in.england@gmail.com;
	helo=mail-ob0-f173.google.com; 
MIME-Version: 1.0
Sender: mh.in.england@gmail.com
In-Reply-To: <5274FBF7.90301@iki.fi>
References: <20131102050144.5850@gmx.com>
	<CANEZrP2UwEX+u0XCxmaMaRWqVMr+3E63UYnVz9oMubbsiJU+6A@mail.gmail.com>
	<5274FBF7.90301@iki.fi>
Date: Sat, 2 Nov 2013 17:26:05 +0100
Message-ID: <CANEZrP2N1DRBcN4JuXKJAodKwk=qNk5hiSnLyx1vbQ1gAd=EhQ@mail.gmail.com>
From: Mike Hearn <mike@plan99.net>
To: Hannu Kotipalo <hannu.kotipalo@iki.fi>
Content-Type: multipart/alternative; boundary=089e0111be76b5c2f804ea342325
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Message Signing based authentication
Precedence: list

--089e0111be76b5c2f804ea342325
Content-Type: text/plain; charset=UTF-8

Guys, identity systems for the web are off-topic for this list. Other than
the anonymous passports/SINs/fidelity bond ideas, Bitcoin doesn't have any
relevance to it.

On Sat, Nov 2, 2013 at 2:19 PM, Hannu Kotipalo <hannu.kotipalo@iki.fi>wrote:

> Maybe this is a bit off-topic, but the *real* answer to the question
> "why-is-nobody-using-ssl-client-certificates" is that it would force
> www pages to be encrypted and would make it a lot more difficult for
> NSA to log www-trafic.
>

No, it wouldn't. You can log a user in using SSL and then redirect the user
back to an encrypted page, using cookies for the rest of the session.
Please don't clutter up this list with conspiracy theories. The brutal
reality is that identity is a hard problem.

--089e0111be76b5c2f804ea342325
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Guys, identity systems for the web are off-topic for this =
list. Other than the anonymous passports/SINs/fidelity bond ideas, Bitcoin =
doesn&#39;t have any relevance to it.<div class=3D"gmail_extra"><br><div cl=
ass=3D"gmail_quote">
On Sat, Nov 2, 2013 at 2:19 PM, Hannu Kotipalo <span dir=3D"ltr">&lt;<a hre=
f=3D"mailto:hannu.kotipalo@iki.fi" target=3D"_blank">hannu.kotipalo@iki.fi<=
/a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:=
0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Maybe this is a bit off-topic, but the *real* answer to the question<br>
&quot;why-is-nobody-using-ssl-client-certificates&quot; is that it would fo=
rce<br>
www pages to be encrypted and would make it a lot more difficult for<br>
NSA to log www-trafic.<br></blockquote><div><br></div><div>No, it wouldn=
9;t. You can log a user in using SSL and then redirect the user back to an =
encrypted page, using cookies for the rest of the session. Please don&#39;t=
 clutter up this list with conspiracy theories. The brutal reality is that =
identity is a hard problem.</div>
</div></div></div>

--089e0111be76b5c2f804ea342325--