Wednesday, April 11, 2007

AACS

I don't like the AACS people.
Apparently they think that a computer is "secure" if the user can't access the data on it, which is the most perverse definition of security that I've ever seen. If I couldn't access data on my computer, I'd call it "broken".
I wonder how key expiring works? Is there a limit to how many keys can be revoked? What if someone compromised thousands of keys--would it be possible to revoke them all?

No comments: