Hi Michael,

----- Original Message ----- 
From: "Michael Sierchio" <[EMAIL PROTECTED]>
Sent: Saturday, September 20, 2003 5:22 PM


> > You mention, that the data is "encrypted using the sender's private key
...
>  > to ensure that data is sent by the intended sender". Even though you
sometimes
>  > find this expression in literature, I consider it clearer when you say
"data is
>  > signed by the sender's private key".
>
> Signing and encryption are quite different.  ...  well, kinda.

Look for instance at
http://www.mayin.org/ajayshah/COMPUTING/encrypted-email-principles.html. The
3rd paragraph says "I encrypt the message through my private key ... (in
order for you to) ... know that it is from me". This actually describes
signature, but uses the term "encryption".

> Public keys are NOT signed by a CA.  A CA signs a cert
The same "difference" as betwenn signing a message or beeing more precise
and saying that you sing a message's digest instead of the whole message.
Thank you for the clarification.

Christian

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to