From 2322288ff13fc3e62180c87313bde9eb5446195a Mon Sep 17 00:00:00 2001 From: Aaron Kaplan Date: Thu, 14 Nov 2013 18:18:52 +0100 Subject: [PATCH] typos createing -> creating. Reformulated a sentence. Better flow. --- src/PKIs.tex | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/src/PKIs.tex b/src/PKIs.tex index 6b3018c..c5fd3e0 100644 --- a/src/PKIs.tex +++ b/src/PKIs.tex @@ -2,15 +2,14 @@ Public-Key Infrastructures aim to provide a way to simplify the verification of a certificate's trustworthiness. For this, certificate authorities (CAs) are -used for createing a signature chain down to the server (or client). Accepting -a CA as a generally-trusted mediator solves the trust-scaling problem at the -cost of introducing an actor that magically is more trustworthy. +used for creating a signature chain from the CA down to the server (or client). +Accepting a CA as a generally-trusted mediator solves the trust-scaling problem +at the cost of introducing an actor that magically is more trustworthy. This section deals with settings related to trusting CAs. However, our main recommendations for PKIs is: if you are able to run your own PKI and disable any other CA, do so. This is mostly possible in any machine 2 machine -communication systems or potentially within a corporate enviroment for specific -applications. +communication systems where compatibility with externalities is not an issue. A good background on PKIs can be found in \todo{insert reference}. -- 2.20.1