On Tue, 2008-09-02 at 10:33 -0430, Patrick O'Callaghan wrote: > The irony is that if you read Versign's documentation, they don't > actually claim to guarantee this. They just go through some > standardized checking process involving external authorities such as > notaries or business registries. A sufficiently interested adversary > can quite easily register a company and get a certificate.
LOL... It does seem to be typical that security is just a veneer. Some banks are just as bad, if you say that you don't have the identification that they're asking for often enough, they give in and let you do what you wanted without good verification. They can also be too helpful with people who've forgotten their passwords. -- [EMAIL PROTECTED] ~]$ uname -r 2.6.25.14-108.fc9.i686 Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists. -- fedora-list mailing list [email protected] To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
