making the X.509 infrastructure available for OpenPGP

MFPA 2014-667rhzu3dc-lists-groups at riseup.net
Thu Feb 6 18:04:32 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi


On Thursday 6 February 2014 at 4:10:33 PM, in
<mid:20140206161033.GE30608 at IUPUI.Edu>, Mark H. Wood wrote:


> The problem is that a CPS can say *anything*.  Without
> reading it, you have no way of knowing what you should
> expect that CA's certificates to mean.

Another problem is a lot of the CA root certificates are built into
the OS or the browser or the MUA, and the default setting is to trust
them without ever showing the CPS (or anything else) to the user so
that they can make their own decision.


- --
Best regards

MFPA                    mailto:2014-667rhzu3dc-lists-groups at riseup.net

The best way to destroy your enemy is to make him your friend.
-----BEGIN PGP SIGNATURE-----

iPQEAQEKAF4FAlLzwKtXFIAAAAAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5p7C8EAJEaPdovze/c+gOQsea1gt/8J43XE7bV9Sjj
PYHN26EqGbEWyHsWJLC1iHgFmNEU/WuHT8x4W6dxSMQI4bqZaOxfKFT2xZO9BNVu
cjPa1UCJNwx5mATFZz4T/XjV1vf9ftEJLJdaXWhzFKejp7r26G5zk+SsUwirL2nA
d85hGk0k
=iZRP
-----END PGP SIGNATURE-----




More information about the Gnupg-users mailing list