> What will prevent somebody from stealing my cert and > going around pretending to be me?
"Okay, if you're Susan, this this blob: xxxxxx" Without your *private* key, they cannot do that. Therefore, they cannot pretend to be you. If they did, it be like accepting a passport or driver's license without seeing if it's your picture. /r$ -- SOA Appliances Application Integration Middleware ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]