Re: [vnit] VASC launches new e-commerce products

Hello Viet Tran,

I absolutely agree with you.

My friend in Germany is working on such a solution, where companies with
special IT security needs don't need to hire security companies etc. to
protect their infrastructure. It works on multiple passwords and tokens to
access the system, a double wall with penetration detectors around
everything, every cable hole is specially secured etc. I never imagined.....

There are AFAIK even more issues.
They must be able to certify the authenticity of the certificate holder. I
am not sure how they handle this.

It is quite easy to issue a certificate. The question is who certifies the
issuer. If VASC doesn't get backing from somebody, then their certificate
is quite useless. And the one who backs it will have a look at their
infrastructure...

The article however does not say clearly, whether VASC will be the CA
(which I doubt very much - I expect that to be a ministry), or they provide
only some SW. Which is trivial. Every modern browser has such modules.....

Rgds.
Stefan

At 17:02 02.05.2002 +0700, Viet Tran wrote:
-------------------------
>It is a good initiative, but ...
>My understanding about setting up CA authority is that the CA service provider
>must provide a full-proof, unbreakable, absolute-security infrastructure to
>prevent server and client' CAs being forged over the Internet. The CA service
>provider site must be a multi-million dollars fortress (a CA authority in
>Australia spent 30 million AUD for their infrastructure before they were
>certified by the Aus government to provide such services to Aus. Post Office,
>and other corporations).
>Is this a case here ? Any comments ?
>
>Regards
>Viet Tran
>
>
>Vern Weitzel wrote:
> >
> > Subject: [WG-eCommerce] VASC launches new e-commerce products
> > From: Stefan Probst <stefan.probst@opticom.v-nam.net>
> >
> > http://vietnamnews.vnagency.com.vn/2002-04/30/Stories/21.htm