When I was browsing MIT's website before, I learned that they have their
own CA. I think they're issuing server certificates for secure hosts under
the
mit.edu domain as well as personal certificates to identify and
authenticate
the students browsing their secure servers.
(See http://web.mit.edu/IS/help/cert/cert.html)

One thing I noticed about their system is that it requires that the user
uses Netscape or Lynx probably because only these allow the addition
of new CAs into the browser. I checked IE 4.0, which I'm using, and 
noticed that it doesn't allow the addition of new CAs. I guess it would
also
be a challenge to distribute the would-be local CA site certificates to 
as many people/browsers as possible. 

---
denis j. c. amparo
[EMAIL PROTECTED]

----------
> From: [EMAIL PROTECTED]
> Subject: [plug] Re: Web Certificate
> Date: Friday, March 31, 2000 12:28 PM
> 
> I wish to thank Ryan, Lisa, Mike, Orly, and Ambo for answering this
> post.  I think Ryan and Lisa did not understand my question though,
> but I thank them anyway.
> 
> I guess we just have to start our own root CA; a University should be
> able to do something like this and offer certificate service to the
> local community.  If you can not trust your favorite university to
> "witness" your public key, then who can you trust?
> 
> If we go ahead with this service, you will be assured that we will not
> charge US$400, like Verisign does.
> 
> //PManalastas


-
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Reply via email to