Title: Trust (Identity Assurance)
Course: Introduction to SSL/PKI > Section: PKI

Trust (Identity Assurance)

Security

PKI can provide:
- Data Confidentially
- Data Integrity
- Authentication
- Non-repudiation

It can not provide trust.

Trust

Trust is an ongoing interaction that establishes and maintains confidence between entities.

The SSL protocol does not provide trust. Trust is provided by the policies and procedures used to administer SSL.

Third Party Trust

In cryptography, a trusted third party is an entity which facilitates interactions between two entities who both trust the third party. Because both entities trust the third party and are trusted by the third party, both entities have trust in each other.

Alice trusts Calvin. Calvin issues a certificate to Bob to identify himself. When Bob presents his certificate to Alice she trusts the certificate and trusts that she is communicating with Bob (because she trusts Calvin).

Note: The CA's certificate issuing policies and procedures provide the third-party-trust for PKI certificates.