Re: What Verisign-free CAs are left?

Quel-y wrote:
Sebastian Gottschalk <seppi@xxxxxxxxx> wrote:

Thawte isn't very trustable either, you can get almost any eMail
certificate from them, even at the highest trust level, without even
revealing your identity.

Actually, I haven't found that at all.

I said "you can", not "you will always". Of course such things happened
in clear violation of their policies, but this is not acceptable for any
default trusted root-CA.

A cheap $20 GoDaddy certificate isn't root-level, but it requires no
identification at all beyond a credit card. Takes five minutes to get. And
most customers using an SSL website with one will never be the wiser.

Point taken. SSL certs today are only good for surpressing warnings on
the client.


--
Quel-y is bangpath(at)sent.as ... remove NOSPAM when e-mailing a reply
.