[ppml] Policy Proposal 2007-1 - Staff Assessment

[michael.dillon at bt.com]

> The pgp (or other certificate method) would be simpler for 
> the user once
> implemented, and would probably be the method of choice, but there are
> times that I am caught away from my normal resources and need to do
> "stuff" , where alternate methods come in handy. 

I have found that the phone works well in such sitiuations. After all,
we're not trying to produce a razzle-dazzle crypto authentication show
here, just implement good business practices.

> I do much like the Thawte Web of Trust (WoT) personal email 
> signatures,
> which are easily implemented in current email clients (like the
> microsoft variants) and allow authenticated/encrypted email without
> needing to add a plugin or run a separate program.  

The Thawte web pages don't give much info on how this works and they
require you to sign up before you can read their "free" guide. No thank
you. This is likely some web-based system and if we are going to go down
that route, it is better to use an SSL web server with a RESTful API.

--Michael Dillon