What happened to dot pro ?

2004-02-01 Thread John R Levine
One of the new domains set up in 2002 was .pro, with three initial subdomains .med.pro, .law.pro, and .cpa.pro. They'd register applicants only after checking evidence that they're licensed in the appropriate profession. (Applicant sends state and license number, registry looks them up to be sure

Re: What happened to dot pro... (BTW)

2004-02-01 Thread J. Oquendo
Anyone can send a spoof through say a misconfigured email server responsible for that TLD say through remixer, posing as someone on that network. Just because someone has some 'nifty' tld means absolutely nothing. If someone truly wants to be held accountable in such fields they could always use

Re: What happened to dot pro... (BTW)

2004-02-01 Thread John R Levine
Not to get into an accountability issue here, but in certain professions I feel digital messages should be signed entirely, I entirely agree, but you need both signatures and verifiable addresses. A PGP or S/MIME signature assures you that the mail definitely came from the address it purports

Re: What happened to dot pro... (BTW)

2004-02-01 Thread Valdis . Kletnieks
On Sun, 01 Feb 2004 21:48:47 EST, John R Levine said: A PGP or S/MIME signature assures you that the mail definitely came from the address it purports to come from, but it doesn't tell you whether that person is who you think it is. That's where limited access domains can help. Umm... no.

Re: What happened to dot pro... (BTW)

2004-02-01 Thread Bradley Dunn
John R Levine wrote: A PGP or S/MIME signature assures you that the mail definitely came from the address it purports to come from, but it doesn't tell you whether that person is who you think it is. That's where limited access domains can help. No actually a PGP signature assures you that a

Re: What happened to dot pro... (BTW)

2004-02-01 Thread John R Levine
an out of band method (phone, in person, business card). I don't see how a limited access domain helps in binding keys to people, unless the registrars are going to start acting as CAs as well. Anyone can create a PGP key with [EMAIL PROTECTED] as an associated email address. The .pro