Nelson,
Nelson Bolyard wrote:
AFAIK, that feature is only in WinXP, and then only ones with recent OS updates.
It works in Win2K as well.
Not true, unless you're confusing the two Microsoft update mechanisms.
Windows XP, starting with SP1, has a new component called "Root certificate Update" (or something similar). This component automatically queries the WindowsUpdate server when a CSP encounters a root CA certificate that it doesn't have.
If the Windows Mother Ship has the root CA certificate available, the new root cert is downloaded silently and the cert-path-validation is recalculated. I've tested this myself and the process takes less than 300 ms; most users would never notice it happening.
Older operating systems (like Win2K,98, etc) can download the new root CA certificates from the Windows Update server with their web browser, but it's a manual process.
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto
