> > Maybe the OpenSSL group should launch a new not-for-profit application
> > verification and certificate signing service?

> The problem is the liability...

No, the problem is getting your root CA certificate included in the browsers.
Manual CA cert installation into each browser doesn't cut it when you're
trying to persuade a business to use one of your server certs.

Liability is a cost issue - you simply negotiate and buy insurance for it.

So when is OpenCA going to bite these particular two bullets?

--
Clifford Heath, Open Software Associates, Ph +613 9895 2194, Fax 9895 2020
56-60 Rutland Rd (or PO Box 625), Box Hill VIC 3128, Australia.
mailto:[EMAIL PROTECTED]    http://www.osa.com.au/~cjh
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to