> > What will prevent somebody from stealing my cert and 
> > going around pretending to be me?
> 
> "Okay, if you're Susan, this this blob: xxxxxx"

Sign.  The challenge is "sign this blob...."
 
> Without your *private* key, they cannot do that.  Therefore, they cannot 

> pretend to be you.  If they did, it be like accepting a passport or 
> driver's license without seeing if it's your picture.
> 
> 
>         /r$
> 
> --
> SOA Appliances
> Application Integration Middleware

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to