Hi all: I have a question regarding WISEkey and another about Cybertrust. I know I can ask "them", but I just want to hear comments from the other Netters. 1. Cybertrust ~~~~~~~~~~~~~ I know that most browsers have (formerly GTE) Cybertrust root CA. Suppose I am a CA and my certificate is signed by Cybertrust Root CA. As a CA, I signed certificates to be used by my subscribers (i.e.the merchants). Therefore, the clients must "move up" the path two level to be able to verify merchant's certificate, and finally recognize Cybertrust Root CA. Can the current IE 5.x and Netscape Navigator/Communicator 4.x/6 do this? (check certificate two level up to the root CA, provided they don't have the intermediate CA's certificate). 2. WISekey question. ~~~~~~~~~~~~~~~~~~~~~~~~ Hmmm... is (former) GTE Cybertrust Root Certificate = WISekey Root Certificate? I just want to make sure, since now Baltimore and WISekey are together "providing" assistance to more than 100 countries. http://www.baltimore.com/news/press/pr20000203.html If not, I didn't see WISEkey root certificate on the current distribution of IE & Netscape... how come WISEkey SA claimed to be the world root CA? Is it just de jure? More on wisekey at http://www.eto.ch IMHO, a root certificate is nearly useless if it is not embedded directly in the popular browser distributions (installations).... 3. Other question ~~~~~~~~~~~~~~~~~ Is there any other initiative from other international institution to establish a world root CA? I assume it would be good, since if we only have "One", then the risk is very high. I knew UNCITRAL had a digital signature discussion, but I fail to find out whether they will establish a world root CA too. How about WTO or other organizations? What's their plan to integreate to the popular browsers (okay... at least Mozilla....:))? I would very much appreciate your comments. Sincerely, -mukti
