[JDEV] Dialback and STARTTLS

Matthias Wimmer m at tthias.net
Fri Nov 21 06:35:29 CST 2003


Hi Justin!

Justin Karneges schrieb am 2003-11-21 01:34:41:
> I have always wondered if maybe the JSF could act as an independent CA, to 
> create free certs for everyone.  It would mean that servers (and clients too, 
> I suppose) would have to bundle the JSF certificate, but this would not be a 
> huge deal.
> I'm not sure how the JSF would handle proper identification of those who 
> apply..   Maybe it could just be a simple first-come first-serve thing, and 
> if someone else gets a cert for your domain before you do, then you can ping 
> stpeter to resolve the dispute. ;-)

I don't see what we would get from this solution. Isn't it harder to
manipulate DNS entries or IP addresses than to just be the first that
requests for a certificate?


Tot kijk
    Matthias

-- 
Fon: +49-(0)70 0770 07770       http://matthias.wimmer.name/
HAM: DB1MW                      xmpp:mawis at charente.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://mail.jabber.org/pipermail/jdev/attachments/20031121/30336cac/attachment-0002.pgp>


More information about the JDev mailing list