Re: success - equifax signed cert for starttls and under us16.00

2006-03-15 Thread Andrew Ng
I know about the limitations of self-signed certs. Depending on the type of deployments, as you have explained earlier, they can useful if these limitations are acceptable. Also, there had been reports that commercial CAs were at fault resulting in possible compromise. On Thu, 16 Mar 2006 05:34:40

Re: success - equifax signed cert for starttls and under us16.00

2006-03-15 Thread Paul Pruett
if I remember correctly, the last time I tried Postfix on OpenBSD, I can use self-generated SSL cert. Hope it's helpful to you. self-signed certs can work with mail smtp servers postfix or sendmail, man starttls But when you used self-signed certificates, other servers or clients may at a m

Re: success - equifax signed cert for starttls and under us16.00

2006-03-15 Thread Andrew Ng
Hi Paul, if I remember correctly, the last time I tried Postfix on OpenBSD, I can use self-generated SSL cert. Hope it's helpful to you. Regards Andrew On Thu, 16 Mar 2006 04:53:58 + (GMT), "Paul Pruett" <[EMAIL PROTECTED]> said: > -- > Musings on getting a CA > signed ce

success - equifax signed cert for starttls and under us16.00

2006-03-15 Thread Paul Pruett
-- Musings on getting a CA signed cert for STARTTLS and other gotchas -- If you ask the companies who market SSL certs about sendmail, they will say that they don't support certs for mail, but for websites only. But maybe the help/support desks are wr