Bil,
Bill Burns wrote:
Not true, unless you're confusing the two Microsoft update mechanisms.
Windows XP, starting with SP1, has a new component called "Root certificate Update" (or something similar). This component automatically queries the WindowsUpdate server when a CSP encounters a root CA certificate that it doesn't have.
If the Windows Mother Ship has the root CA certificate available, the new root cert is downloaded silently and the cert-path-validation is recalculated. I've tested this myself and the process takes less than 300 ms; most users would never notice it happening.
Older operating systems (like Win2K,98, etc) can download the new root CA certificates from the Windows Update server with their web browser, but it's a manual process.
I was referring to the automatic "Windows update" which automatically downloads patches for Windows - not the manual browser updates. I have seen updates for "root certificates" in the list for "Windows update", under Win2K. I have never used Win XP, so I couldn't have confused the two ...
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto
