From: Mark C. Henderson <markh@wimsey.bc.ca>
Date: Tue, 20 Apr 93 20:43:40 PDT
To: norm@netcom.com (Norman Hardy)
Subject: Re: Webs of Trust vs Trees of Trust
Message-ID: <m0nlVPm-0001B2C@squirrel.wimsey.bc.ca>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

Subject: Re: Webs of Trust vs Trees of Trust

On Apr 20, 14:45, Norman Hardy wrote:
} Subject: Webs of Trust vs Trees of Trust
} As I understand RIPEM there is a tree of agencies such that everyone
} must trust all elements of the tree between him and the root.

I just want to point out (as has been pointed out before) that it is a 
mistake to confuse RIPEM with PEM. 

RIPEM is an implementation of a subset of PEM. At this moment, RIPEM has
absolutely no support for certificates or signed public keys.

PEM on the other hand, is a draft internet standard which requires
certificates and a hierarchy that can be described as a "Tree of Trust".

There are at least a couple of full PEM implementations. Probably
the best known at this point is the one from T.I.S. which is currently
in beta test.

Apologies in advance for cluttering the mailboxes of the majority
of cypherpunks who already know this.

Mark

- -- 
Mark Henderson
mch@squirrel.wimsey.bc.ca
markh@wimsey.bc.ca

-----BEGIN PGP SIGNATURE-----
Version: 2.2

iQCVAgUBK9S+T+I11LPFgBXjAQF9EwP+J69peq9ccWAvKIlzVRI88QbD5ZN4RIwA
GmVw8FzOCAu0tK3MQqoeBu+//gQfD6MoEBeGXvBzXJffNGVc2UvPk8vr/uB1y9Je
K5y7mlQNrGoil9wxv6kR9IgVgHzkOsXBSo3Uv/ldpVQL82jR4Ms0qccF8fAcjpHB
wDtNiEZkPc4=
=Yo4O
-----END PGP SIGNATURE-----