The verification functions of OpenPGP keys, included in \gnutls{},
are simple ones, and do not use the features of the ``web of trust''.
For that reason, if the verification needs are complex,
-the assistance of external tools like GnuPG is recommended.
+the assistance of external tools like GnuPG and GPGME\footnote{
+Available at \htmladdnormallink{http://www.gnupg.org/related\_software/gpgme/}}
+is recommended.
\par
There are two verification functions in \gnutls{},
The \printfunc{gnutls_openpgp_key_verify_ring}{gnutls\_openpgp\_key\_verify\_ring}
year = {1999},
}
+@Misc{RESCOLA,
+ author = "Eric Rescola",
+ title = "SSL and TLS: Designing and Building Secure Systems",
+ year = {2001},
+}
+
@Misc{TLSEXT,
author = "Simon Blake-Wilson and Magnus Nystrom and David Hopwood and Jan Mikkelsen and Tim Wright",
title = "Transport Layer Security (TLS) Extensions",
\label{sec:tlsintro}
\tls{} stands for 'Transport Layer Security' and is the successor of \ssl{},
the Secure Sockets Layer protocol\footnote{described in \cite{SSL3}} designed by Netscape.
-\tlsI{}\footnote{described in {\it RFC 2246}\cite{RFC2246}} is an Internet protocol,
+\tlsI{} is an Internet protocol,
defined by {IETF}\footnote{IETF or Internet Engineering Task Force
is a large open international community of network
designers, operators, vendors, and researchers concerned with the evolution of
the Internet architecture and the smooth operation of the Internet. It is open
-to any interested individual.},
-that provides confidentiality, and authentication layers over any reliable
-transport layer. The description, below, refers to \tlsI{} but also
-applies to \sslIII{} since the differences of these protocols are minor.
-Older protocols such as \sslII{} are not discussed nor implemented in \gnutls{}
-since they are not considered secure today.
+to any interested individual.}, described in \cite{RFC2246} and
+also in \cite{RESCOLA}. The protocol provides confidentiality, and
+authentication layers over any reliable transport layer. The description,
+below, refers to \tlsI{} but also applies to \sslIII{} since the differences
+of these protocols are minor. Older protocols such as \sslII{} are not
+discussed nor implemented in \gnutls{} since they are not considered secure
+today.
\input{layers}