Re: I want to become a Certified CA

From: x y (jamescagney90210@excite.com)
Date: 05/17/02 

From: "x y" <jamescagney90210@excite.com>
Date: Fri, 17 May 2002 11:02:17 -0400

"Steve" <email@steverusch.com> wrote in message
news:454a01c1fd40$82620240$39ef2ecf@TKMSFTNGXA08...
> I agree with you on MS. Just for the record I agree that
> it is the CA's and not Microsoft who are really cashing
> in. I was just reflecting that Microsoft is in control of
> creating the system of signing the certificate, in other
> words they control if the browser automatically recognizes
> the CA as an authorized root.
>
> Which brings me to your next point which I think you
> pretty much hit it right on the head. ALL of this is
> nothing more than PAYING FOR CONVIENENCE! NOT for any
> kind of authenticity or trust. BINGO! You got it.

Ironically I seem to remember reading that Entrust, one of the cheapest of
the CAs I'm aware of, supposedly does more thorough checking than Verisign,
which is one of the most expensive. You may remember that there was a
fairly public snafu where an unknown someone successfully registered a
certificate claiming to be a Microsoft employee, when they were not. That
cert is still out there and I seem to remember reading that it could also be
used to somehow sign/authenticate code like Active-X controls as well as web
sites. It does make you wonder what you get when you buy an expensive
Verisign cert. I think it's just that most people only know about Verisign.
Maybe that's why their stock and their sales are in the toilet.

Relevant Pages

  • Re: I want to become a Certified CA
    ... I was just reflecting that Microsoft is in control ... >Verisign cert. ...
    (microsoft.public.inetserver.iis.security)
  • Re: how to run application(exe) in browser
    ... signed the control exists. ... It has nothing to do with whether or not you can trust the ... unless it is an organization like Microsoft or Adobe (and ... pay some money to Verisign. ...
    (microsoft.public.vc.mfc)
  • Re: Asp.Net AJAX dynamically added Tab Control not displaying
    ... TabPanel assumes there's no active tab and it hides all the tabs at client ... protected void Page_PreRender ... Microsoft is providing this information as a convenience to you. ... does not control these sites and has not tested any software or information ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Need quick way change old field name to new one everywhere ?
    ... Dave Hargis, Microsoft Access MVP ... Ability to specify the objects to search in ... No install and un-install facility. ... Names of fields, controls (control: ...
    (microsoft.public.access.tablesdbdesign)
  • Re: Popups and Permissions....
    ... Add/Remove Programs entry in the Control Panel. ... I couldn't find any information on these dll files on the web, ... csrss.exe 600 Client Server Runtime Process Microsoft Corporation ... lsass.exe 680 LSA Shell Microsoft Corporation ...
    (microsoft.public.windowsxp.perform_maintain)
Quantcast