<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: What will produce better Information Security? More trust? Or more untrust?</title>
	<atom:link href="http://un-trusted.net/2009/08/29/what-will-produce-better-information-security-more-trust-or-more-untrust/feed/" rel="self" type="application/rss+xml" />
	<link>http://un-trusted.net/2009/08/29/what-will-produce-better-information-security-more-trust-or-more-untrust/</link>
	<description>Exploring what it means to be un-trusted, untrustworthy, insecure</description>
	<lastBuildDate>Mon, 14 Dec 2009 00:17:08 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
	<item>
		<title>By: Victor N</title>
		<link>http://un-trusted.net/2009/08/29/what-will-produce-better-information-security-more-trust-or-more-untrust/#comment-3</link>
		<dc:creator>Victor N</dc:creator>
		<pubDate>Sun, 30 Aug 2009 03:43:12 +0000</pubDate>
		<guid isPermaLink="false">http://un-trusted.net/?p=3#comment-3</guid>
		<description>I think this discussion requires a set of agreed upon terms.  I&#039;ll dive in blindly because if I otherwise know how much I don&#039;t know I may not begin at all...

&quot;Trust&quot; and &quot;Trusted Trust&quot; are two key notions that come to mind.

&quot;Trust&quot; for me means formal, documented agreement between two or more parties about what they intend to being trusting about as well as the trust itself.  This implies a knowledgeable or skillful disclosure.  It requires a scope and an acceptance of how one party relies upon another.  It is a statement about what is being exchanged and the agreement itself can be validated as factual by virtue of the agreement recorded.  If such an agreement cannot be documented, a trustworthy (aka quality) trust may not be possible.  Key here is that such statements can be validated by external observers not affiliated with the trust.

One party might want to promise more and be unable to authenticate or validate their part of the trust to the extent they intend to and that I would call an untrustworthy trust.  One party may be willing to receive even something like that notion of risk in a trust (if the trust pertains to risk exchange) and be unable to do so, e.g. accepting a risk realized puts the accepting entity out of business.  Regardless of each party&#039;s assent, the trust was still unreliable as it was not fully factual in the statements of exchange being made.  Unbounded statements are difficult in the context of establishing trust.

I&#039;d also say there are unilateral trusts where a receiving party trusts the other party without assent.  Can I rely on data from a 3rd party site responsibly if they make no statement of intent for that data to be reliable?

Without a valid trust there can be no valid relationship between risk, acceptance or transfer of risk.  If a trust cannot be documented in a structured manner it cannot be used to measure risk.

From the above, I think you can begin to get at what untrustworthy is.

A nice potential side-effect of such terms might be definitive guidance for business decision-makers independent of a specific instance, aka, Best Practice guidance.

(first shot over the bow... prepare the boarding party)</description>
		<content:encoded><![CDATA[<p>I think this discussion requires a set of agreed upon terms.  I&#8217;ll dive in blindly because if I otherwise know how much I don&#8217;t know I may not begin at all&#8230;</p>
<p>&#8220;Trust&#8221; and &#8220;Trusted Trust&#8221; are two key notions that come to mind.</p>
<p>&#8220;Trust&#8221; for me means formal, documented agreement between two or more parties about what they intend to being trusting about as well as the trust itself.  This implies a knowledgeable or skillful disclosure.  It requires a scope and an acceptance of how one party relies upon another.  It is a statement about what is being exchanged and the agreement itself can be validated as factual by virtue of the agreement recorded.  If such an agreement cannot be documented, a trustworthy (aka quality) trust may not be possible.  Key here is that such statements can be validated by external observers not affiliated with the trust.</p>
<p>One party might want to promise more and be unable to authenticate or validate their part of the trust to the extent they intend to and that I would call an untrustworthy trust.  One party may be willing to receive even something like that notion of risk in a trust (if the trust pertains to risk exchange) and be unable to do so, e.g. accepting a risk realized puts the accepting entity out of business.  Regardless of each party&#8217;s assent, the trust was still unreliable as it was not fully factual in the statements of exchange being made.  Unbounded statements are difficult in the context of establishing trust.</p>
<p>I&#8217;d also say there are unilateral trusts where a receiving party trusts the other party without assent.  Can I rely on data from a 3rd party site responsibly if they make no statement of intent for that data to be reliable?</p>
<p>Without a valid trust there can be no valid relationship between risk, acceptance or transfer of risk.  If a trust cannot be documented in a structured manner it cannot be used to measure risk.</p>
<p>From the above, I think you can begin to get at what untrustworthy is.</p>
<p>A nice potential side-effect of such terms might be definitive guidance for business decision-makers independent of a specific instance, aka, Best Practice guidance.</p>
<p>(first shot over the bow&#8230; prepare the boarding party)</p>
]]></content:encoded>
	</item>
</channel>
</rss>
