> unless, of course, there's a built-in list of trusted CAs.

That's exactly what it is.  Patching the list is apparently pretty
easy for Netscape Navigator -- instructions are included in the
mod_ssl Apache patch -- but it's not currently known what needs to
be done to make IE add a trusted CA.

        /r$

Reply via email to