Re: certificates

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 11/29/04

  • Next message: Jordan: "Re: certificates" 
    Date: Mon, 29 Nov 2004 00:06:11 +0100

    Hi Jordan,

    There are usually at least two reasons. One if what you described -- server
    authentication. E.g. I really want to know that I am talking to Microsoft
    server when I am downloading patches; or I really want to know that I am
    talking to my on-line bank server when I am entering data to access my
    account information.

    The other purpose is to encrypt the data that is exchanged between the
    server and the client. I don't want people to listen in on my conversation
    when I am sending information from my computer to bank server -- or when
    bank server replies with information.

    There are also client side certificates. They are used to authenticate users
    to web server. This way server knows who it is talking to (since I am the
    only one who is supposed to have the private keys).

    I hope this helps,

    Mike

    "Jordan" <anonymous@discussions.microsoft.com> wrote in message
    news:989601c4d59c$8dd72c40$a401280a@phx.gbl...
    > Hello,
    >
    > Question, what is the TRUE purpose of having a
    > certificate for a website? just to prove the
    > authenticity? saying this is the REAL site?
    >
    > Regards,
    > Jordan
    >

  • Next message: Jordan: "Re: certificates"

    Relevant Pages

    • client certificates for authentication but not encryption
      ... resolved the crash, but at the cost of using a secure ... client certificates for authentication but not encryption ... > server using the WebDAV protocol. ...
      (microsoft.public.inetserver.iis.security)
    • Re: VPN and EAP
      ... EAP Authentication used to access the Server. ... to use Certificates. ... VPN ACCESS ...
      (microsoft.public.windows.server.sbs)
    • Re: VPN and EAP
      ... EAP Authentication used to access the Server. ... to use Certificates. ... VPN ACCESS ...
      (microsoft.public.windows.server.sbs)
    • Re: ESMTP: STARTTLS with "target domain" parameter(s)
      ... Some services use "client certificates" as a substitute to authentication. ... server on which you host multiple independent (read as AS / autonomious ...
      (comp.mail.sendmail)
    • Re: W2K PEAP MSCHAPV2 and IAS Certifcates
      ... > Can someone explain how W2k IAS Server certificates are used when XP ... > Client does not seem to use/need certificate just IAS Server, ... while server authentication is performed with a server ...
      (microsoft.public.internet.radius)