Re: future SFTP version question

[pgut001%cs.auckland.ac.nz@localhost (Peter Gutmann)]

nisse%lysator.liu.se@localhost (=?iso-8859-1?q?Niels_M=F6ller?=) writes:

>Then I think the first thing you have to do is to write up the requirements.
>"Non-repudiation" is a very fuzzy concept to me, and I'll have a hard time
>participating in discussion of details in a non-repudiation mechanism.

It's a fuzzy concept to everyone, so much so that after 20-odd years of trying
the X.509 guys gave up and renamed the nonRepudiation flag in certs to
something that actually had a meaning.  Calling it a "delivery receipt" would
be better, that's what S/MIME (which is the only major standard to
specifically address this) calls it.  In fact you could probably lift a lot of
the S/MIME stuff, since they've looked at it in some detail.

Peter.