3 ms·
I have two 2 questions when it comes to the usage of public key cryptography: 1. Who will be the CA and RA? 2. How do you prove your identity to RA?
by noncoml 9y ago
I have two 2 questions when it comes to the usage of public key cryptography:
1. Who will be the CA and RA?
2. How do you prove your identity to RA?
- lisper 9y agoThe institutions that want to verify your identity should be their own CAs. If I were implementing a replacement for SSNs, I'd send out certs rendered as QR codes by physical mail. That's not perfect, but it's at least as secure as the current practice of sending out UIDs by physical mail. At least the is the possibility of getting the key safely inside a secure device and destroying the original. With the current protocol, in which the only way to prove you know a secret is to reveal the secret, it's completely hopeless.
- noncoml 9y agoI am not a PKI expert, so I may be missing something, but isn’t this chicken and egg problem? For someone to issue you a certificate, you have to prove your identity to them. How would you do that?