Subj : Re: anyone using digital signatures? To : Geo. From : Rich Date : Thu Mar 15 2001 02:11 pm From: "Rich" <@> It doesn't check with the certification authorities. That is why the = certificates are installed locally. It allows you to verify the trust = chain without any external reference. There is another feature that does enable checking services over the = Internet. In the Internet Options dialog Advanced tab there is an = option Check for publisher's certificate revocation and another Check = for server certificate revocation. When these are enabled a certificate = that has a verified trust chain may still be considered invalid. If the = certificate includes information on how to determine if it has been = revoked that check will be made if enabled. If the check is disabled = there will be no check for revocation and a revoked certificate may be = trusted. That said, if you delete all the certificates how do you connect to = servers with https without getting warned that the certificates aren't = verifiable? Rich "Geo." wrote in message = news:3ab19934$1@w3.nls.net... Rich,=20 I'm weird, what can I say.. but when I install Outlook or Express, I = go in and delete all the cert authorities. I don't like my machine = checking with anyone unless I tell it to. Even if it's just to look up = someone elses cert. Geo. "Rich" <@> wrote in message news:3aad9ff0$1@w3.nls.net... If you don't care to have a certification authority like Verisign = issue your certificate you can issue one to yourself. It limits the = value of any claim of identity but if you only care about recognizing = tampering or using encryption that would be OK. Rich "Geo." wrote in message = news:3aad67a9@w3.nls.net... I use PGP because it's free to home users. Way I see it, you don't = need to pay to prove who you are. Geo. "Robert Bononno" wrote in message news:3aaac687@w3.nls.net... I was wondering if anyone was using digital signatures with = Outlook Express (I have version 5)? Microsoft points you to Veritas, which charges = something like 10 bucks a year. I was wondering: - how well does this work - how well is it integrated with OE - what about attachments? - what's the best way of making a public key available to someone I've never used PGP or any other form of digital signature or = encryption but have been toying with the idea. There have been occasions when it = could have come in handy. -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Robert Bononno rbononno@erols.com on the Web at: http://www.erols.com/rbononno mirror site: http://homepages.nyu.edu/~rb28/ --- XP Toss HTML Stripper v0.3.4 * Origin: Barktopia Gating Project (1:379/100) .