On Fri, Apr 01, 2011 at 03:33:15PM +0100, István wrote: > > FreeBSD ships OpenSSL but it is broken because there is no CA. Right, > it is like shipping a car without wheels, I suppose.
Err . . . now. SSL isn't broken, any more than vi is broken just because it doesn't ship with text files for you to edit. It would be more like shipping a car without giving you a list of roads on which the manufacturer suggests you use it. > > Is there a reason to do this? I don't know. Maybe the guys who made that decision thought that users should be able to make their own decisions about who to trust, rather than relying on Verisign to make that decision for them. I'm just speculating wildly -- I actually have no idea. -- Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
pgp4SxvhxpdLO.pgp
Description: PGP signature