In article <[EMAIL PROTECTED]>,
Steve Kostecke  <[EMAIL PROTECTED]> wrote:

>There is no Central Scrutinizer who decrees whether or not a server is
>"authentic" or "trusted".
>
>The entity generating the host parameters marks them as trusted by using
>the '-T' switch during the generation process.

It is not up to the server operator whether clients should believe
some random self-signed "certificate" proffered by a server (or
someone masquerading as a server).

-GAWollman

-- 
Garrett A. Wollman   | The real tragedy of human existence is not that we are
[EMAIL PROTECTED]| nasty by nature, but that a cruel structural asymmetry
Opinions not those   | grants to rare events of meanness such power to shape
of MIT or CSAIL.     | our history. - S.J. Gould, Ten Thousand Acts of Kindness

_______________________________________________
questions mailing list
[email protected]
https://lists.ntp.isc.org/mailman/listinfo/questions

Reply via email to