I know, NFS has a lot of new security features in both the more or lessmythical NFS v4 and in NFS v3 with some hacks. The problem is that theyall give me the wrong sort of security (as far as I can tell); likeother real network filesystems, they're all focused on authenticatingthe users. What I want is good authentication of the hosts.

(The problem with user-based authentication is that it takes out allforms of setuid . This forces a really

Given both the need for certificate authorities and the practical weaknesses that they have, it would be niceif it was easy to drop a CA without causing massive havoc. The moststraightforward way to implement this is to allow SSL certificates to besigned by more than one authority, and to be considered valid if any ofauthorities is trusted.

The problem with this is economic. Each CA is going to have to chargeyou their own payment in order to sign your certificate, which meansthat most people will never buy this

I've been dancing around this issue recently, but it's time to comeout and say it explicitly: if you want things to actually be secure,you cannot ask users to manage their own security .

In practice, users are not interested in security (well, not much)and are not going to do it, and the rare ones that are interested anddo care almost certainly don't know enough to make sensible choices . What you get if you make users manage their ownsecurity is more