Hi all, it may be a little bit off topic but I guess this could be interesting for some of you. In the last months we tested some means of linking different PKIs together (for example cross-certificates). Tests were conducted with Windows2000, WinXP and Linux and the most common mail- and WWW-clients. The work was initiated by SURFnet (Netherlands) and DFN-CERT Services GmbH (Germany).
See: http://www.dfn-pca.de/bibliothek/reports/ Cheers, Olaf ###################################################################### WWW-Abstract: Actually Public Key Infrastructure (PKI) technologies are in a state of being used and useful. Many organisations run their own PKI now, creating certificates predominantly for signed and encrypted email and for user authentication. On the one hand this leads to a growing amount of users that own certificates and know how to use them, wich provides a basis for further development of PKI-enabled applications. On the other hand many seperate small PKIs have been established that could be much more useful if they could be linked to each other. Linking these PKIs would enable secure information exchange between different institutions. This report reviews the possible solutions for linking of PKIs (eg. cross-certificates) and provides the results of tests with actual applications. ###################################################################### -- Dipl.Inform. Olaf Gellert PRESECURE (R) Senior Researcher, Consulting GmbH Phone: (+49) 0700 / PRESECURE [EMAIL PROTECTED] A daily view on Internet Attacks https://www.ecsirt.net/sensornet ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
