Naming, Certificates, and
Revocation
Session Chair : Manuel Blum, UC Berkeley, USA
The effective coordination of globally distributed computer systems requires the consistent use of global name spaces; the meaning of a name in Hong Kong should be the same as its meaning in Boston.The vast scale of the Internet, together with the concern for security, makes the management of global name spaces a real challenge. Who should be allowed to assign a meaning to a name? How should these definitions be communicated securely to others? How can such a definition be changed?We discuss several approaches to these problems, focussing on the use of digital certificates as a secure binding mechanism. The use of interlinked local name spaces, first pioneered by Lampson and Rivest in the design of the SDSI system, will be highlighted as an approach that circumvents some of the problems intrinsic to a more typical hierarchical naming scheme, and which allows a richer set of names, including threshold names. Finally, the problems associated with changing definitions will be met with a radical proposal---the elimination of certificate revocation schemes altogether.
| Back to Top | Video | Session Chair | Abstract | Biography | Lecture Note | Back to Home |