Questions about the layer of "trust" and URI

-----BEGIN PGP SIGNED MESSAGE-----

I'm the student of Technical University of Budapest, my speciality is
electronic signature and Public Key Infrastructures. Now I've been
involved in a project in connection with semantic web (especially the
layer of "trust" and XML signature).

I've found the expression of "web of trust" in many documents, but it
would seem - if I understand well - that it needs a direct contact
between entities and is based on personal acquaintance (such as at
Pretty Good Privacy - PGP), so it's good for mailing with friends,
but not in a "trusted" worldwide usage. And on the other hand there
is the model of Trusted Third Party (such as PKIs including CAs and
RAs) where the main goal is for entities to be able to communicate in
a "trusted" way worldwidely.

My question: Will "web of trust" be based on Trusted Third Party
model (PKI technology)?

My other problem is the question of URI. In XML environment we
identify objects by Uniform Resource Identifiers (URIs) but in the
world of ASN.1 (ITU and ISO) in a long-standing system we use Object
Identifiers (OIDs) based on ITU-T X.690 and ITU-T X.660
recommendations. So, now we use two identifiers to the same object.
In the standard of XML signature (ETSI TS 101 903 - XAdES) I've
noticed that this problem was solved by a new type of value:
"OIDasURI" (and OID is used as the identifier). In the world of PKIs
OIDs are used to identify objects (such as documents like CPS and
CP)...

My question: Will there be a translation between OIDs and URIs? Which
will be preferred?

Thanks for your answers!

Aron Szabo

Pretty Good Privacy - PGP

user ID: Aron SZABO
key ID: 0xAF06DC0B
key type: RSA
key size: 2048
e-mail address: baron@interware.hu

You can download my public key from the following key servers:

ldap://europe.keys.pgp.com:11370
http://pgpkeys.mit.edu:11371
ldap://keyserver.pgp.com


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBPlyaIDURd2evBtwLAQFNsQf9FU4aVWn0hUrqluRJ7V+BGf3u2AM43ScS
aDSK9ajOIzKyqz4Vme495dn4WbBfeJiQ8dChNIHqCqr/ZpY1u/pFrxs6h3Z+8pgL
KpFZqkejBJPimf6GQO4j276uCIqrGRBssI/YBlGHgGPXntN1vUSY8M6Vp3BVNU1p
OeJ+2+sWCIW3e+2x6LgZvVdoGE0wwr54gJfVP6alADELrhyrVRqRg4EOpp1iJ9op
WXO0oUxBqZN0vja3awCc3I6GGjN8GN5zYDNr5JAO9GbmM6TlyAwGPh4EDQcz0EhQ
NdVjtSTFYHprmPx8yyFCV1CIiGlhV5UDNAACdszHrjzydpNPdXuInw==
=KC2I
-----END PGP SIGNATURE-----

Received on Wednesday, 26 February 2003 05:45:41 UTC