Re: Free SSL Certification Authority

["markw-4" <user=5@nabble.blu.org>]

 Correct me if I'm wrong, isn't this a bad idea? 

*Anyone* can create their own certificate for their own website based on 
their own created "authority," the only difference is that user's will be 
asked if they trust the authority. 

The free SSL certificate doesn't seem to do any sort of checking to verify 
that the SSL site has had any sort of verification. What's worse is that 
if the authority certificate is part of Mozilla Firefox and Safari, then 
they are insecure. 



> From: Fred <[hidden email]> 
> Subject: Free SSL Certification Authority 
> To: Boston Linux Usergroup <[hidden email]> 
> Message-ID: <1199017536.13633.4.camel@jupiter> 
> Content-Type: text/plain 
> 
> For those interested in certificates, check this out: 
> 
> http://cert.startcom.org/
> 
> I have not tried them myself yet, but will soon. Supposedly their 
> certificates will work in most up-to-date browsers and the like, but I 
> have not verified this. 
> 
> -Fred