[TrustBar] [Fwd: Re: Low assurance SSL CAs]

Duane duane at cacert.org
Wed Feb 16 02:03:15 EST 2005


Ian G wrote:

> The 'metric' has to be either centralised -
> agreed to some standard - or decentralised
> so the user judges it on a per-CA basis.

Except in MS IE, I can turn off the CAs in my browsers, so even though 
it starts out centralised it can be over ridden (perhaps we're coming up 
with the same answer from different angles?)

So basically my original email covered this, set of predefined settings, 
that the user is able to tweak after the fact... I can add to the list 
in MS IE, but I can't remove this isn't exactly an ideal situation that 
I want to be dealing with...

-- 

Best regards,
  Duane

http://www.cacert.org - Free Security Certificates
http://www.nodedb.com - Think globally, network locally
http://www.sydneywireless.com - Telecommunications Freedom
http://happysnapper.com.au - Sell your photos over the net!
http://e164.org - Using Enum.164 to interconnect asterisk servers

"In the long run the pessimist may be proved right,
     but the optimist has a better time on the trip."


More information about the TrustBar mailing list