Dr Stephen Henson <[EMAIL PROTECTED]>:

>>> How many certificates are in the chain? If its only two then there's no
>>> point because the root will have to be in the browser anyway.

>> This is a convenient way to get it into the browser, assuming that you
>> distribute the CA certificate fingerprint to everyone first.  That
>> can make quite a lot of sense for intranets.

> Depends on the browser. For some versions of Netscape it will just crash
> and for others it will just add the server certificate and not the CA. 

Hm, it always worked for me.

> Later versions of IE are OK though.
> 
> With Netscape sending unknown CA certificates in S/MIME email or as a
> MIME attachment seems to work better.

Assuming that you use the complete installation (Netscape
Communicator).  Some time ago I worked with Netscape Navigator, which
does not include e-mail functionality.  Now I do use Netscape
Navigator, but have no attention to configure it for e-mail.
We have users using everything from pine, elm and mutt to emacs for
their e-mail, plus some users with Outlook or something like that;
also there are some who in fact do use Netscape for e-mail, but for
most it's just a web browser.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to