Bugtraq mailing list archives
Re: Verisign certificates problem
From: Wham Bang <wham_bang () YAHOO COM>
Date: Tue, 27 Mar 2001 08:36:17 -0800
Peter Gutmann <pgut001 () CS AUCKLAND AC NZ> wrote:
Elias Levy <aleph1 () SECURITYFOCUS COM> writes:Actually checking most of the CA certificates shipped with IE less than half have a CPD field. Of the big CA only Entrust seems to use the field.That's not surprising, they invented and, I believe, patented the thing.
Correct. And then, in the interest of standardization, offered free licensing of the patent - an offer which was taken up by many companies, including Verisign. You'd think they'd be using it by now...
From a quick search of Entrust's Web site, one finds:
- http://www.entrust.com/news/files/04_23_98.htm (free license) - http://www.entrust.com/news/files/11_02_98.htm (Microsoft, Verisign et al license) ===== Wham! <wham_bang () yahoo com> __________________________________________________ Do You Yahoo!? Get email at your own domain with Yahoo! Mail. http://personal.mail.yahoo.com/?.refer=text
Current thread:
- Verisign certificates problem Sinclair, Roy (Mar 23)
- CRLs (was Re: Verisign certificates problem j eric townsend (Mar 25)
- Re: CRLs (was Re: Verisign certificates problem Patrick Patterson (Mar 26)
- <Possible follow-ups>
- Re: Verisign certificates problem Elias Levy (Mar 24)
- Re: Verisign certificates problem Peter Gutmann (Mar 25)
- Re: Verisign certificates problem Peter Gutmann (Mar 25)
- Re: Verisign certificates problem Ogle Ron (Rennes) (Mar 26)
- Re: Verisign certificates problem Michael Reilly (Mar 27)
- Re: Verisign certificates problem Wham Bang (Mar 27)
- CRLs (was Re: Verisign certificates problem j eric townsend (Mar 25)