RE: Verisign/NSI/Thawte monopoly
On Tuesday, March 28, 2000 at 04:18:15 PM, [EMAIL PROTECTED] wrote: > hi, > IMHO someone should create a central trusted CA that is open sourced for > all to trust however that would take some doing..;-)) ..anyone interested:-)) I'm game for putting in some time/effort - but I think you're possibly underestimating the sheer volume of work that would go into creating a CA that *everyone* would trust. You'd have to do an awful lot of verification work on each and every cert (personal or server) before anyone trusted you... let alone all of them. That said... if someone has an idea of how to do this and make it work, count me in. :) Kevin ~~~~~~~~ Kevin Evans | [EMAIL PROTECTED] A government big enough to give you everything you want is a government big enough to take from you everything that you have. --- Gerald Ford #!/bin/perl -sp0777ihttp://www.thewalledcity.net/ __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Client (personal) certificates
Anyone there have any information on generation of client certificates with openssl? I can generate them (albeit only for Netscrape at the moment - IE doesn't seem to be playing ball) but Netscape won't verify them claiming it's not certified for email. What am I doing wrong? I've read the FAQ and the linked pages from it, but I was looking for a semi-technical (i.e. more readable than the RFC's) introduction to certificates and (specifically) the way they're integrated into browsers.. On a related note, why can't I as the CA generate both public and private keys and then install them both in a browser? Thanks, Kevin ~~~~~~~~ Kevin Evans | [EMAIL PROTECTED] "Nothing that results from human progress is achieved with unanimous consent. And those who are enlightened before the others are condemned to pursue that light in spite of others." - Christopher Columbus -- Are you a citizen of the walled city? http://www.thewalledcity.net/ __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
