Inductive Analysis of the Internet Protocol TLS -- Inductive Analysis of the Internet Protocol TLS -- External Consistency and the Verification of Security Protocols -- External Consistency and the Verification of Security Protocols -- The Trust Shell Game -- The Trust Shell Game -- Overview of the AT&T Labs Trust-Management Project -- Overview of the AT&T Labs Trust-Management Project -- KeyNote: Trust Management for Public-Key Infrastructures -- Discussion Session — Trust Management -- Application-Oriented Security Policies and Their Composition -- Application-Oriented Security Policies and Their Composition -- Secure Fingerprinting Using Public-Key Cryptography -- Secure Fingerprinting Using Public-Key Cryptography -- Third Party Certification of HTTP Service Access Statistics -- Third Party Certification of HTTP Service Access Statistics -- Delegating Trust -- Delegation of Responsibilities -- Delegation of Responsibility -- Abuse of Process -- A New Concept in Protocols: Verifiable Computational Delegation -- A New Concept in Protocols: Verifiable Computational Delegation -- Delegation and Not-So Smart Cards -- Delegation and Not-So Smart Cards -- Certification and Delegation -- Discussion Session: Differences Between Academic and Commercial Security -- Optimistic Trust with Realistic eNvestigators -- Optimistic Trust with Realistic Investigators -- Insider Fraud -- Insider Fraud -- Panel Session - Future Directions.

This book constitutes the thoroughly refereed post-workshop proceedings of the 6th International Workshop on Security Protocols held in Cambridge, UK in April 1998. The 15 revised papers presented as position statements are followed by transcripts of the discussions between the authors and the audience. Also included is a report on the final panel discussion on future directions in security protocols research and developments. Thus the volume reflects the lively interaction at the workshop. The papers are devoted to the interrelations between trust and delegation, exploring the implications and effects of these upon such issues as authorization, security policy, and cryptosystems and component design.