Wow, agreed. I had to visit multiple people with photo IDs and other ID just to get a free Email cert from Thawte.
If any muggins can get a cert with any name, that CA should not be in the trusted certs list. Certs do more than just provide for encryption; they also verify identity. On 12/1/05, Russ <[EMAIL PROTECTED]> wrote: [snip] > > I don't' think th ey should be included in the trusted CA list as they do > not do any form of identify verification. -- CFAJAX docs and other useful articles: http://jr-holmes.coldfusionjournal.com/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Find out how CFTicket can increase your company's customer support efficiency by 100% http://www.houseoffusion.com/banners/view.cfm?bannerid=49 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:225786 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
