On Tue, 16 Dec 2003 10:51:06 -0800, Nelson B wrote:

> Kamal R. Prasad wrote:
>> Hello,
>> 
>>  I just got myself a Thawte freemail 2048-bit key. 
> 
> You got a Thawte freemail *certificate* that contains a copy of *your*
> key.  You supplied the key.  Thawte supplied the certificate.

I have a question about that, on Thawte website at
http://www.thawte.com/html/SUPPORT/email/index.html they say : 

<quote>
Getting a Personal Certificate

When you request a certificate, a private key is generated and stored in
your browser. A certificate request file is made from this private key and
sent to Thawte (automatically), which we then sign and issue to you as a
certificate. You then download your certificate and it is installed in
your web browser, from where you can enable it for use with your email
client.
</quote>

So that is mozilla that generates a key pair and Thawte never sees my
private key ?

Anyone care to explain or give pointers on how exactly the certificate
request is carried out ?


Thanks in advance,

Zauc
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to