ABSTRACT

Computer security has been a victim of the “year of the…” syndrome. First it was firewalls, then intrusion detection systems, then VPNs, and now certification authorities (CAs) and public key infrastructure (PKI). “If you only buy X,” the sales pitch goes, “then you will be secure.” But reality is never that simple, and that is especially true with PKI.