I don't... This point has already been discussed in this mailing list. The
result is this: you can't trust a CA that delivers a certificate whatever
the informations you provide...

A CA is not only a technical piece of software to which you send a
request and from which you get a properly formatted certificate.

On Tue, 28 Mar 2000, Tariq Habib wrote:

> I fully support your point of view. 
> 
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of
> > [EMAIL PROTECTED]
> > Sent: Tuesday, March 28, 2000 5:20 AM
> > To: [EMAIL PROTECTED]
> > Subject: Verisign
> > 
> > I just found out that Verising has aquired NSI.  A short while back they
> > aquired Thawte .
> > 
> > I think some of us should be looking into ways to get certs from a "real"
> > competitor to Verisign recognized by IE and Netscape.
> > 
> > I know that netscape allows easy importation of a cert and that IE is a
> > bit of a bugger - but for the vast majority of the great unwashed public
> > they need a "clean" simple and brain-dead solution or they will continue
> > to go with the flow.  
> > 
> > Consentration of economic power like we see in Verisign at this point is
> > NEVER healthy - or am I overreacting?

-- 
Erwann ABALEA
System and Development Engineer - Certplus SA
[EMAIL PROTECTED]
- RSA PGP Key ID: 0x2D0EABD5 -

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to