Re: ca cert questions (was Re: Dumb SSL question)

2002-04-02 Thread Cliff Woolley
On 2 Apr 2002, jon schatz wrote: > we had not chose to trust). geotrust had me install a CA cert on the > server and use 'SSLCACertificateFile' to point to it. magically, ie then > trusted the certificate. so why does this work? i mean, why can't i > start forging ssl certificates that are truste

Re: Dumb SSL question.

2002-04-02 Thread Eric Rescorla
"Ladner, Eric (Eric.Ladner)" <[EMAIL PROTECTED]> writes: > Oops.. I finally found this info in the mailing list. > > I still have a question though.. > > What mechanism is it that will allow an encrypted communication (a > connection to the https side of the web server) without popping up > the

ca cert questions (was Re: Dumb SSL question)

2002-04-02 Thread jon schatz
On Tue, 2002-04-02 at 13:50, Ladner, Eric (Eric.Ladner) wrote: > What mechanism is it that will allow an encrypted communication (a > connection to the https side of the web server) without popping up > the View/Accept/Whatever dialog for the certificate? All that's required is a valid cert ( val

RE: Dumb SSL question.

2002-04-02 Thread Ladner, Eric (Eric.Ladner)
Oops.. I finally found this info in the mailing list. I still have a question though.. What mechanism is it that will allow an encrypted communication (a connection to the https side of the web server) without popping up the View/Accept/Whatever dialog for the certificate? Is there a validation

Re: Dumb SSL question.

2002-04-02 Thread Andrew Lietzow
Eric Ladner wrote RE:>>Basically, I want to use encryption, but not have the user intervene to enable/disable it. -- In IE 5.5; Tools, Internet Options, Security, Custom Level... Enable "Don't prompt for Client Certificate..." (or is it "Disable" -- it's a double negative and