On Fri, Mar 03, 2000 at 09:31:58AM +0000, [EMAIL PROTECTED] wrote:
> Alex,,
>      The trouble with using self signed certs is that you need to install the CA
> cert in the browser to stop messages popping up when you connect to the site -
> obviously no real problem as you will either be using them for testing or in a
> closed environment (or limited number of clients).  Using the 'Free Test
> Certificates' from thawte is a little better as the CA cert that they use to
> sign the CSR is already installed in Netscape (only 4.7x?).
> 
> Karl,
>      To avoid this problem 'buy a cert' or install the CA cert into each browser
> (have a look at pkg.contrib/loadcacert.cgi)
> 
> Mikey

That would be nice EXCEPT that Thawte and most of the others won't SELL a
cert to an indivdual except under "extraordinary circumstances".

--
-- 
Karl Denninger ([EMAIL PROTECTED])  Web: http://childrens-justice.org
Isn't it time we started putting KIDS first?  See the above URL for
a plan to do exactly that!

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to