Re: Discontinuance of Thawte personal email certificates and Web of Trust

["Stanclift, Michael" <michael.stanclift () ROCKHURST EDU>]

Maybe some good news for providers like CACert coming soon.

http://www.istartedsomething.com/20091010/microsoft-free-root-certificate-authority-windows/




Michael Stanclift
Network Analyst
Rockhurst University

http://help.rockhurst.edu
(816) 501-4231

Think before you print!


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jeremy 
Mooney
Sent: Wednesday, September 30, 2009 6:11 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Discontinuance of Thawte personal email certificates and Web of Trust

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

jeff murphy wrote on 9/30/09 09:47 :
> Ignoring personal accounts, it would be interesting to see EDUCAUSE
> (identity & access mgmt) investigate whether this can be provided to
> EDUs. Similar to the way .edu is managed by EDUCAUSE, perhaps it's
> possible to obtain an EDUCAUSE chained root cert by one of the existing
> roots (IPS?) and then allow EDUs to issue email/TLS certs for themselves
> using an EDUCAUSE hosted interface. The ability to do this for TLS (SSL)
> certs alone would be a significant win, from a financial and security
> perspective, for the EDU community.

That kinda exists. USHER (http://usher.internet2.edu/) is for the US
education community, which is effectively the same user group as
EDUCAUSE/.edu. It's in a similar position to CAcert regarding getting
into the browsers, but last I looked wasn't moving as quickly toward
that goal (at least not in public documentation).

Not to say USHER isn't a good project, but I'd rather see short term
effort/resources put toward CAcert as it'd benefit the US education
community, educational institutions in other countries, individuals, and
many other organizations as well.

- --
Jeremy Mooney
ITS - Bethel University
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iF0EARECAB0FAkrD5XAWGGhrcDovL3N1YmtleXMucGdwLm5ldAAKCRBiEJEZ/xdg
lu78AJ48vL2bMoFOnDJA7AvTMhTcYixZDwCfSvHWmfjCw+GMYFs3oOYgrIz0t6w=
=ZR1v
-----END PGP SIGNATURE-----