IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: future SFTP version question



Peter Gutmann wrote:
Ben Laurie <ben%algroup.co.uk@localhost> writes:


Its actually a concept with a perfectly well-defined meaning in law - which
is, it is something that is _defined by law_ to be non-repudiable (i.e. you
can deny it, but it doesn't get you anywhere). An example is the UK Customs
and Excise electronic VAT returns - they are non-repudiable by statute.


Well, that's the problem, legal nonrepudiation is well-established and well-
defined, but technical nonrepudiation isn't.  The best advice I've seen (from
talking to lawyers) is (1) back everything up with paper documents and written
signatures and (2) pray you never become the test case.

Technical nonrepudiation is just a stupid idea, which could be why no-one ever agrees about it.

--
ApacheCon! 13-17 November! http://www.apachecon.com/

http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff



Home | Main Index | Thread Index | Old Index