What's a PKI, Why Would I Want One, and How Should it Be Designed?

This talk explains what a PKI-based system is, and how it compares in functionality with a system like Kerberos. It also covers some crypto, to demystify the notions of public key and secret key cryptography and allow you to impress a date. Then it describes various ways people think of deploying a PKI that have issues in terms of building in monopolies, being insecure, and/or being unmanageable, and proposes a method that will avoid all these problems. It describes the issues involved in all the pieces, such as how to get securely certified, how to do revocation, how to know the public key of the certifying authority, and how a human might know its own public key.