The Key Management Problem One of the hardest problems in cryptographic applications is that of key management. If Alice wants to send an encrypted message to Bob, how does she find out Bob's public key? She can know it personally (manual keying) SSH does this She can trust a friend to tell her (web of trust) PGP does this She can trust some third party to tell her (CA's) SSL does this