Subj : Re: Cert Security
To   : Robert Comer
From : Rich
Date : Wed Mar 28 2001 05:46 pm

From: "Rich" <@>


   Really?  You have no other software that uses TLS or SSL?  How about =
S/MIME or other form of secure email?

   In regard to IBM, visit https://www.ibm.com/ and look at the =
certificate for the site.  Now, what happens if someone else issues a = 
certificate for www.ibm.com and delivers it to someone other than IBM.

   That aside, George's question is flawed or else he misunderstands =
something.  Internet Explorer is perfectly capable of checking = revocation of 
certificates but that doesn't help if the certification = authority doesn't 
include in the certificate the locations to check for = certificate revocation 
lists.

Rich

  "Robert Comer" <bobcomer@mindspring.com> wrote in message =
news:3ac2db92$1@comertower....

  > The real question is, who else has this problem, is IBM software =
also not
  > able to revoke the certs? If so then that might change my opinions.

  I don't have any other software that even uses certificates...

  - Bob Comer




--- XP Toss HTML Stripper v0.3.5
 * Origin: Barktopia Gating Project (1:379/45)

.