Ah Python, you have spoiled me for all other languages

[Marko Rauhamaa]

Chris Angelico <rosuav at gmail.com>:

> You've added extra levels of indirection, but it comes to the same
> thing. You're requiring that everyone who wants to conduct business on
> the internet (taking credit card numbers etc) has to go through four
> separate authentication processes, and a failure in any one of them
> means the site is not considered legit.

Yes. What you get is some much higher-level security than at the moment.

You could do with passport-level security with a single national
government but then you would be prone to attacks (or blunders) from
that government.

> Right. And "legitimate" is defined as "not refused by any of the four
> countries". All they have to do is decide that something's not
> legitimate, and bam, they're off air. ANY ONE of your four has this
> power of veto.

Certificates can be revoked, kinda, yes. Or more to the point,
roadblocks could be put in the way of certifying some applicants.
However, if that started happening, the OS and browser makers would
simply drop the obnoxious government from the prestigious club. It
really wouldn't be in their interests to start acting up.


Marko