Dr. Greg Quinn wrote:

> A big limitation as far as I can see would be getting certs
> pre-installed into web browsers.  The chance of either MS or
> netscape doing this would be close to none.

Yes.  On the other hand, there is a way of giving people a trusted
copy of the root certificate without it being pre-installed.  You get
a certificate from some other CA, and use that on the web server that
supplies the root cert.  People thus know that the copy of the root
cert they are receiving really comes from freecert.  (Of course, they
don't know how much freecert is to be trusted.)

----------------------------------------------------------------------
      phone +44 (0) 20 8542 7856, fax +44 (0) 20 8543 0176, post:
  Skygate Technology Ltd, 8 Lombard Road, Wimbledon, London, SW19 3TZ
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to