Contrast With Typical PKI
In contrast, a typical X.509 PKI permits each certificate to be signed only by a single party: a certificate authority (CA). The CA's certificate may itself be signed by a different CA, all the way up to a 'self-signed' root certificate. Root certificates must be available to those who use a lower level CA certificate and so are typically distributed widely. They are for instance, distributed with such applications as browsers and email clients. In this way SSL/TLS-protected Web pages, email messages, etc. can be authenticated without requiring users to manually install root certificates. Applications commonly include over one hundred root certificates from dozens of PKIs, thus by default bestowing trust throughout the hierarchy of certificates which lead back to them.
Read more about this topic: Web Of Trust
Famous quotes containing the words contrast with, contrast and/or typical:
“Happiness ain’t a thing in itself—it’s only a contrast with something that ain’t pleasant.... And so, as soon as the novelty is over and the force of the contrast dulled, it ain’t happiness any longer, and you have to get something fresh.”
—Mark Twain [Samuel Langhorne Clemens] (1835–1910)
“By contrast with history, evolution is an unconscious process. Another, and perhaps a better way of putting it would be to say that evolution is a natural process, history a human one.... Insofar as we treat man as a part of nature—for instance in a biological survey of evolution—we are precisely not treating him as a historical being. As a historically developing being, he is set over against nature, both as a knower and as a doer.”
—Owen Barfield (b. 1898)
“It was announced that the trouble was not “malignant.”... It was a typical triumph of modern science to find the only part of Randolph that was not malignant and remove it.”
—Evelyn Waugh (1903–1966)