On Mon, 8 Nov 1999, Jeffrey Altman wrote:

[...]
> 
> What I was hoping to determine from this thread was whether or not by
> using a verified cert one could determine in a trusted manner who the
> user is.  It sounds to me like the answer to that is 'no'.  That if a
> user wants to use a Verisign cert then the user will have to register
> the cert with the system that is going to accept it before being able
> to use it.  

This was (and still is) my conclusion too...

> 
> In other words, we still have a long way to go.
> 

Yes :-(

Regards,

Franco

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to