Jeff Gutierrez said:
> #example) it will secretly copy the key elsewhere, right? how do i
> establish #among my users that they should trust my program that it
> doesn't do monkey #business with their private keys? :)
> #
>
> Any person in the right mind will NOT give their private key file and
> passphare to someone else.  Doing so defeats the purpose of
> public-private keys, as Doc Manalastas pointed out.  Would you give
> copies of your house, and car keys to whoever asks for them?  I surely
> wouldn't. ;)
>

OK, so how can a web-based program sign documents/email using a private key
that it has no access to if this is the case?

does that mean i have to come up with a platform-specific (or at least Java
desktop-based) application to do the signing?

thanks,
-dre



_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to