Hi Michael,

On Tue, 24 May 2005 17:11:39 +0200 (11:11 AM here), Michael Geyer [MG]
wrote in <mid:[EMAIL PROTECTED]>:

>> My ISP uses an Equifax Secure Global Certificate which I've installed
>> in my Address Book under Trusted Root CA.

MG> for which hostname is this certificate issued? I'd bet the hostname
MG> is _not_ mail.kcoates.com.

That is correct. It is a generic certificate not specific to my domain
name.

MG> I have this very problem with my hoster's certificate, which is
MG> issued for my hoster's mail server. So I have to use
MG> mail.<hoster's server> instead of mail.<mydomain>. The two are in
MG> fact the same server (or the same mail program on the same server
MG> in fact.)

Ahh ... I hadn't thought of that. Perhaps that may work. I'll do some
experimenting.

>> If I use Thunderbird or The Bat!/GPGrelay, I am allowed to use this
>> certificate and establish the secured connection.

MG> I guess they do not verify the certificate's server name, which
MG> seems like a flaw to me.

If I remember correctly, Thunderbird warns but allows me the option to
use the certificate. GPGrelay simply proceeds.

>> The Bat! gives me no options and won't allow a connection.

MG> I'd like to have an option for the server's name in the
MG> certificate. That would solve our problem at once.

Or at least an option to allow use of the certificate and not prompt
in the future for that ISP. Thanks for the suggestion.

-- 
Kevin Coates
Dewitt, NY USA

Using TB! v3.5 under Windows XP 5.1.2600 SP2
________________________________________________________________
(see kludges for my pgp key)

Attachment: pgpV1JJ82g3pj.pgp
Description: PGP signature

________________________________________________________
 Current beta is (none) | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/

Reply via email to