On Sun, 19 Feb 2006, Gabriel Gunderson wrote:
On Sun, 2006-02-19 at 20:23 -0700, Derek Carter wrote:
if all you want is encription then why not roll your own CA?
http://sandbox.rulemaker.net/ngps/m2/howto.ca.html
That works for most of my stuff but this requires it to work without any
pop up boxes asking to check out the cert.
Yeah, that's the important distinction. Users should be suspicious of any
site for which their browser pops up cert-related dialogs. If you can get a
cert that doesn't raise flags on the popular browsers, very few people will
complain. (Oh, and don't go redirecting from http://yourstore.com to
https://somedomaintheyveneverheardof.kr for the checkout page...)
-J
/*
PLUG: http://plug.org, #utah on irc.freenode.net
Unsubscribe: http://plug.org/mailman/options/plug
Don't fear the penguin.
*/
