nanog mailing list archives

Re: PGP, S/MIME + SSL cross-reference (Was: Dear RIPE: Please don't encourage phishing)


From: Ryan Malayter <malayter () gmail com>
Date: Fri, 10 Feb 2012 11:11:18 -0800 (PST)



On Feb 10, 12:01 pm, Leo Bicknell <bickn... () ufp org> wrote:
OSX at least has a central certificate store (Keychain), although
it's not up to the tasks of the world I wish to have.  Other OS's
provide no central store, so each application maintains their own
key store.

Windows has had its own centralized certificate store and APIs since
NT 4.0's release in 1996.

Firefox and Java are the only mainstream software can think of on
Windows that insists on using their own certificate stores (really
just a "pile of world-readable files") instead of the built-in per-
machine+per-user certificate store on Windows.


Current thread: