Re: free Certificate Authority

2002-11-04 Thread Bear Giles
evilbunny wrote: Be interesting to have a standard cross verification scheme/policy between free efforts where the data is sent and then some rules applied against it if it's 98% the same or something ok it... I was thinking about cross-certification last night, but I'm not sure if it makes bus

Re: free Certificate Authority

2002-11-04 Thread Mark H. Wood
On Fri, 1 Nov 2002, Xperex Tim wrote: > I don't really see the value of free certificates. If they are free > that means that the CA can't be doing any identity checks. So any > schmoe can get a certificate with your name on it and claim to be you. I agree that such cert.s are essentially anonym

Re[2]: free Certificate Authority

2002-11-03 Thread evilbunny
Hello Bear, Be interesting to have a standard cross verification scheme/policy between free efforts where the data is sent and then some rules applied against it if it's 98% the same or something ok it... May not be practical *shrug* and also 1 site may not agree with how another treats the polic

Re: free Certificate Authority

2002-11-03 Thread Bear Giles
evilbunny wrote: Interesting idea... Only problem is the bank doesn't verify the name electronically as far as I'm aware... Least none of the payment gateway's I've dealt with in the past... (I was planning to charge $10, but I am also planning to offer personal server certs if you have a $10 c

Re[4]: free Certificate Authority

2002-11-03 Thread evilbunny
ember 2002 3:08 >> To: Mark H. Wood >> Subject: Re[2]: free Certificate Authority >> >> >> Hello Mark, >> >> Few methods that can be used... The one I hope to make use of is >> similar to that of Thawte's Web of trust, when you get end users >&g

RE: Re[2]: free Certificate Authority

2002-11-03 Thread Franck Martin
> Sent: Saturday, 2 November 2002 3:08 > To: Mark H. Wood > Subject: Re[2]: free Certificate Authority > > > Hello Mark, > > Few methods that can be used... The one I hope to make use of is > similar to that of Thawte's Web of trust, when you get end users &g

Re: free Certificate Authority

2002-11-02 Thread Bear Giles
Xperex Tim wrote: I don't really see the value of free certificates. If they are free that means that the CA can't be doing any identity checks. So any schmoe can get a certificate with your name on it and claim to be you. Even a free cert can easily verify that the email address is valid eno

Re[2]: free Certificate Authority

2002-11-01 Thread evilbunny
Hello Xperex, Not if you get the users to verify each other in person and with photo id etc, and until they do don't put names on certificates... -- Best regards, evilbunnymailto:evilbunny@;sydneywireless.com http://www.cacert.org - Free Security Certificates http:/

Re: free Certificate Authority

2002-11-01 Thread Xperex Tim
I don't really see the value of free certificates. If they are free that means that the CA can't be doing any identity checks. So any schmoe can get a certificate with your name on it and claim to be you. --- Peter Ziobrzynski <[EMAIL PROTECTED]> wrote: > I searched far and wide and can't find

RE: Re[4]: free Certificate Authority

2002-10-29 Thread Franck Martin
ober 2002 6:07 > To: Marco "Kiko" Carnut > Subject: Re[4]: free Certificate Authority > > > Hello Marco, > > > Front end is PHP based, with all operations feeding a MySQL table, > which is then crontab'd to trigger a c programmer to interact with > ope

Re: free Certificate Authority

2002-10-29 Thread Bear Giles
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've been working on a similar project. My approach, with notes, is: - - JSP front-end. This isn't so much for the forms as for the results when you search the database - the JSP kicks out XML, but can run it through XLST for browsers and clients th

RE: Re[4]: free Certificate Authority

2002-10-29 Thread Marco \"Kiko\" Carnut
Evilbunny, > MKC> The idea is to use the Verified Identity (IV) CA to get credibility to > MKC> the name. This will become clear when we put the VI CA online in a few > MKC> days -- then you'll see what it is capable of. I'll let you know when > MKC> it's online. Meanwhile, its main ideas are desc

Re[4]: free Certificate Authority

2002-10-28 Thread evilbunny
Hello Marco, MKC> The idea is to use the Verified Identity (IV) CA to get credibility to MKC> the name. This will become clear when we put the VI CA online in a few MKC> days -- then you'll see what it is capable of. I'll let you know when MKC> it's online. Meanwhile, its main ideas are described

RE: Re[2]: free Certificate Authority

2002-10-28 Thread Marco \"Kiko\" Carnut
Hi evilbunny, > I've a similar project under development, little more testing to see > if the user has the rights to the domain, and they generate their own > private keys etc... little more effort on the users part, however I've > tried to code it in a sane method, by stopping people being able t

Re: free Certificate Authority

2002-10-27 Thread Peter Ziobrzynski
I'll be damned. It really is a free email cert at thawte.com. At veritas they have one but not free - $45/year. I thought the SSL is completely dead as for personal use. But not to far from it. Anybody can get PGP/GPG for free now and new mozilla enigmail plugin does all the magic. Thanks Karl!

Re: free Certificate Authority

2002-10-27 Thread Karl-Michael Werzowa
... on www.thawte.com you'll find it at middle, left of home page: (9 o'clock ;-) Am 2002-10-27 18:41 Uhr schrieb "Peter Ziobrzynski" unter <[EMAIL PROTECTED]>: > Franck Martin wrote: >> I think there was something called www.medacen.net >> >> Also, check the ISOC PKI w

Re: free Certificate Authority

2002-10-27 Thread Peter Ziobrzynski
Franck Martin wrote: I think there was something called www.medacen.net Also, check the ISOC PKI working Group www.isoc.org You can register a free certificate for e-mail on thawte and versisign. This is interesting. How do you know about it? Did you do it? On either t

free Certificate Authority

2002-10-27 Thread Peter Ziobrzynski
I searched far and wide and can't find a CA service in a reasonable price. Verisign, Thawte, etc. all charge hundreds for one year PKI. There must be a way to get a recognized personal client SSL certificate for free. Banks, ISPs should be interested in having their customers use signed email. D

Re: free Certificate Authority

2002-10-27 Thread Franck Martin
I think there was something called www.medacen.net Also, check the ISOC PKI working Group www.isoc.org You can register a free certificate for e-mail on thawte and versisign. Cheers. [EMAIL PROTECTED] On Sun, 2002-10-27 at 20:14, Peter Ziobrzynski wrote: I searched far and wid