RE: trust? - win2k source code tools

["Alan.l1" <alan.list1 () ntlworld com>]

> found this interesting...
>  iexpress.exe
>  signcode.exe
>  makecert.exe ( DigSig.dll )

It's not interesting or at least not to anyone who's played with
code-signing. Two of these utils are from an old SDK and iexpress is
probably the same as found in the IEAK.

> who would you like your package to be certified from today sir?
>   \win2k\private\ispu\pkitrust\initpki\certs\

Any box running IE will have those (certs != private keys).

-A

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html