Charlie Caro <ccaro@...> wrote:

>Keeping these digital certificates in a database or file at the end user's

site

>would defeat the whole purpose of the exercise. It needs to be embedded in

the

>binary executables. Ownership and usage of databases is still under SQL

control.

>Ownership and usage of software executables controlled by digital

certificates.


Unless I've missed something fundamental, the executables are just files at
the end user's site, and the whole point of the exercise has been defeated.
What you have proposed is just security through obscurity.

Cryptography does not automatically provide security.

Jan Mikkelsen