> Date: Wed, 12 Jan 2005 16:25:06 -0700 > From: [EMAIL PROTECTED] > > Furthermore any felon in jail can have his lawyer register a company > and then obtain a legit cert from pretty much any official > certification authority.
True, but not as bad as it sounds. The felon could register a web site and get a valid certificate attesting that he's the owner of the URL "jailed-felon.com". Then you can establish an authenticated SSL connection to https:www.jailed-felon.com. So what? Nothing unexpected. What Joe Jailed Felon (aka JJ) cannot do is get a legitimate certificate saying he's terralogic.net. So he can prove that he's himself, but he can't impersonate you. -- Ken Goldman [EMAIL PROTECTED] 914-784-7646 ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
