Re[2]: TLS + Self Signed Certificate

2011-04-07 Thread Simon Martin
Title: Re[2]: TLS + Self Signed Certificate Hi Alto, Thursday, April 7, 2011, 4:05:23 AM, you wrote: Hi Simon, snip While not automatic, the endpoint _is_ certified (or at least certifiable) nevertheless using self-signed certificates. You just have to do the checking yourself instead

Re[2]: TLS + Self Signed Certificate

2011-04-06 Thread Simon Martin
Title: Re[2]: TLS + Self Signed Certificate Hi Vilius Wednesday, April 6, 2011, 8:32:27 AM, you wrote: Hello, Search for VeriSign, Thawte, Comodo. Yes this is an option, however all the other e-mail clients I have tried (Windows Live Mail included) allow me to accept and store

RE: Re[2]: TLS + Self Signed Certificate

2011-04-06 Thread Vilius Ĺ umskas
Please do not use HTML for simple email messages, it is hard to reply inline, and mods are complaining about top posting. What's the point to accept and store self-signed certificate anyway? It ads zero security. This was discussed on this list extensively multiple times, and if you really

Re[2]: TLS + Self Signed Certificate

2011-04-06 Thread Simon Martin
Hi Vilius et al, Wednesday, April 6, 2011, 12:00:16 PM, you wrote: You can do this by using standard plain text connection method. That is hard to do if the server, for example, only supports SSL connections (as is common practice today) and uses self-signed certs for that - and as such

Re[2]: TLS + Self Signed Certificate

2011-04-06 Thread Simon Martin
Hi Vilius et al, big snip There are 2 main uses for PKE. 1.- Certify endpoints. For this there must be an unbroken certificate chain from a trusted CA down through 0 or more intermediate certificates to the end certificate that is being used. For this purpose Vilius is right, self-signed

Re[2]: TLS + Self Signed Certificate

2011-04-06 Thread Simon Martin
78|jn h776i Vilius et al, Wednesday, April 6, 2011, 1:05:46 PM, you wrote: Sveiki, Wednesday, April 6, 2011, 8:56:31 PM, you wrote: This is what the confirmation dialog does. It says I have this certificate that I don't trust, do you trust it? and also gives the details for the