Re: dual-use digital signature [EMAIL PROTECTED]

2004-07-26 Thread Anne Lynn Wheeler
At 07:07 PM 7/24/2004, Peter Gutmann wrote: A depressing number of CAs generate the private key themselves and mail out to the client. This is another type of PoP, the CA knows the client has the private key because they've generated it for them. one could claim that there might be two possible

Re: dual-use digital signature [EMAIL PROTECTED]

2004-07-26 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Sun, 25 Jul 2004 13:41:56 -0600, Anne Lynn Wheeler [EMAIL PROTECTED] said: lynn At 07:07 PM 7/24/2004, Peter Gutmann wrote: lynn A depressing number of CAs generate the private key themselves lynn and mail out to the client. This is another type of PoP, the lynn

Re: dual-use digital signature [EMAIL PROTECTED]

2004-07-26 Thread Anne Lynn Wheeler
At 02:00 PM 7/26/2004, Richard Levitte - VMS Whacker wrote: That's all and well, but I can't see why that would be interesting to a generic, third-party CA. If you're talking about a CA within the same corporation, then I can understand, since they usually (as far as I can guess) work from a