You mention, that the data is "encrypted using the sender's private key ...
> to ensure that data is sent by the intended sender". Even though you sometimes > find this expression in literature, I consider it clearer when you say "data is > signed by the sender's private key".
Signing and encryption are quite different. ... well, kinda.
In an advanced szenario you might depict that the public keys involved are in turn>signed by a CA to prevent a "man in the middle attack".
Public keys are NOT signed by a CA. A CA signs a cert that binds a public key to a subject. Having observed a standard of due care, and having performed all necessary due diligence, this offer void where prohibited, go back and stop talking when you should be listening.
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
