Received-SPF: pass (sog-mx-1.v43.ch3.sourceforge.com: domain of gmail.com
	designates 74.125.82.175 as permitted sender)
	client-ip=74.125.82.175; envelope-from=andyparkins@gmail.com;
	helo=mail-we0-f175.google.com; 
From: Andy Parkins <andyparkins@gmail.com>
To: bitcoin-development@lists.sourceforge.net
Date: Mon, 19 Dec 2011 11:44:59 +0000
User-Agent: KMail/1.13.6 (Linux/3.0.0-1-686-pae; KDE/4.6.3; i686; ; )
References: <1323728469.78044.YahooMailNeo@web121012.mail.ne1.yahoo.com>
	<CAJna-HjyZv2y9grNdnKKG8k6tn7jdW=zL=vtrALpeW8jkuzV6Q@mail.gmail.com>
	<CAGQP0AEEzOjc2ayOJYgs_oh4RG91Dp4JSHUjyPX=qdp+ri6oSg@mail.gmail.com>
In-Reply-To: <CAGQP0AEEzOjc2ayOJYgs_oh4RG91Dp4JSHUjyPX=qdp+ri6oSg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="nextPart8385282.5JSCYqT214";
	protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <201112191145.02427.andyparkins@gmail.com>
Subject: Re: [Bitcoin-development] [BIP 15] Aliases
Precedence: list

--nextPart8385282.5JSCYqT214
Content-Type: Text/Plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

On 2011 December 19 Monday, Jorge Tim=F3n wrote:
> Ok, so HTTP is not an option unless it shows a huge warning. I don't
> know the HTTPS possible attack, but maybe it needs a warning message
> too, from what you people are saying. Although using namecoin to

The problems with HTTPS have been social rather than technical.  Multiple C=
As=20
have been strong-armed by governments or tricked into issuing fake=20
certificates by scammers.  There is no technical measure around that.  By=20
using the CA certificate we are saying to the system "here is someone I tru=
st=20
to issue a certificate".  So far, with a large number of CAs, that trust is=
=20
misplaced.

I'm of the opinion though that this problem is outside the remit of bitcoin=
 to=20
solve.

Perhaps we should be more strict about which CA certificates are trusted by=
=20
the bitcoin client: say restrict it to those who have demonstrably good=20
practices for verifying identity; rather than the ridiculous amount of trus=
t=20
that comes pre-installed for me in my browser.


Andy

=2D-=20
Dr Andy Parkins
andyparkins@gmail.com

--nextPart8385282.5JSCYqT214
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEABECAAYFAk7vI7sACgkQwQJ9gE9xL2318ACeK/RL1lKs82WfPTWyzL56JN/B
GJMAoMWtM8c11VRMxcvREPntD+M/LwDt
=uaQt
-----END PGP SIGNATURE-----

--nextPart8385282.5JSCYqT214--