Mike Stokes wrote:
> I think we're talking about two different things. I want to deliver and
> install a client cert on a remote workstation programmatically. Aren't you
> refering to the client's cert subject returned in the HTTP header? Maybe I'm
> lost. I've worked tangentially with certs for years. This is the first time
> I've ever had to get low level so there may be exploitable gaps in my
> understanding.  :)

I /think/ the answer is that you install the cert as part of a
customized distribution or you provide a URL. Either way the client with
a human in the loop must accept the cert - it can't unilaterally be
"pushed" onto a client.

Of course, I could be wrong...

hth,
AA
_______________________________________________
Mozilla-security mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-security

Reply via email to