nanog mailing list archives
Re: Does your Certifying Authority have a clue who you are? Do they care?
From: Bob Beck <beck () bofh cns ualberta ca>
Date: Fri, 05 Dec 2003 08:55:29 -0700
I would never trust a ssl certificate for that purpose. It does provide a reasonable effort to keep information between me and the server confidential. That's worth something, I guess.
I agree with you, I just don't think this is reasonable. If the CA's aren't going to keep tabs on your stuff (and I'm not just picking on thawte here) and the browsers both don't differentiate between CA's, and make it easy for the user to accept random certificates or bypass the certification mechanism entirely, I don't think it is a reasonable effort. The whole process is flawed. -Bob
Current thread:
- Does your Certifying Authority have a clue who you are? Do they care? Bob Beck (Dec 04)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Adi Linden (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Bob Beck (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Valdis . Kletnieks (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Adi Linden (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Valdis . Kletnieks (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Mark Foster (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Valdis . Kletnieks (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Suresh Ramasubramanian (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Deepak Jain (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Peter Galbavy (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Steven M. Bellovin (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Damian Gerow (Dec 05)
- Re: Does your Certifying Authority have a clue who you are? Do they care? Adi Linden (Dec 05)