Re: Key storage

2000-04-21 Thread Thomas Reinke
Actually, they can be worth a fair bit; it depends on the circumstances. Take the following scenario: 1) Bank wants to authenticate its users via certs, but doesn't want to become a certificate issuer. 2) Bank trusts N certificate providers that do nothing but guarantee that the

Re: Key storage

2000-04-21 Thread Michael Sierchio
Fedor Utenkov wrote: > > Hello all, > > I have a theoretic question. > What is the best way to store CA private key ? Put in the file on > the comp, running the web server and facing the internet seems to me > not very secure. But from the another point of view I'd like to > au

RE: Key storage

2000-04-21 Thread Salz, Rich
>What's the value of an automated signing procedure? It depends greatly on where the automation is. For example, if the input to the automated process is, say, a magtape from the Personnel Office... __ OpenSSL Project

Re: Key storage

2000-04-21 Thread Tom Jordan
What's the value of an automated signing procedure? If you're signing certs in an automated fashion, how much are they really worth (ie. what 'certification' has really happened)? At 04:12 PM 4/21/2000 +0400, you wrote: >Hello all, > > I have a theoretic question. > What is the best way