On Mon, 8 Nov 1999, Jeffrey Altman wrote:
[...]
>
> What I was hoping to determine from this thread was whether or not by
> using a verified cert one could determine in a trusted manner who the
> user is. It sounds to me like the answer to that is 'no'. That if a
> user wants to use a Verisign cert then the user will have to register
> the cert with the system that is going to accept it before being able
> to use it.
This was (and still is) my conclusion too...
>
> In other words, we still have a long way to go.
>
Yes :-(
Regards,
Franco
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]