X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=doc%2Fconferences%2Fseminar%2Fabstract;fp=doc%2Fconferences%2Fseminar%2Fabstract;h=83fddfca34f0d4ff4b6d28708d3696593d53a301;hb=838f52739cc05bfaca19e49bc64c17b435022f1c;hp=0000000000000000000000000000000000000000;hpb=1a64ed28ce14cdb98ff5ff15430ac03da0c3dc78;p=monkeysphere.git diff --git a/doc/conferences/seminar/abstract b/doc/conferences/seminar/abstract new file mode 100644 index 0000000..83fddfc --- /dev/null +++ b/doc/conferences/seminar/abstract @@ -0,0 +1,17 @@ +Monkeysphere provides a robust, decentralized, out-of-band Public Key +Infrastructure (PKI) based on OpenPGP's Web of Trust. It is intended +to support any protocol which needs public-key authentication or +binding between public keys and real-world entities. Current +implementations include mutual authentication (both server and client) +for SSH and authentication of servers for HTTPS. The technique is +resistant to X.509's inherent single-issuer policy bias, allows use of +a single key for a host offering multiple services, and handles +initial contact, re-keying, and revocation better than OpenSSH's +traditional key continuity management (KCM) scheme. It also requires +no changes to on-the-wire protocols, and is transparently +interoperable with existing tools, so the migration path to the new +PKI is smooth (and encouraged). Discussion will include the merits +and drawbacks of the Monkeysphere, as well as its relationship to +in-band measures (such as the Server Name Indication (SNI) TLS +extension and the subjectAltName (sAN) extended attribute for X.509v3 +certificates) which provide some pieces of similar functionality.