Certifiacte Authority Newbie Question

[Guest]

HI, I know that Windows 2000 & 2003 comes with a CA. If I set this up does
this mean I no longer need to purchase Certs from a CA company like Verisign?
If so how do I get around the error meassage that will come up on the
browser that say that the Cert is not from a known CA? Thank you ,

Firenet

 

[Holger Pollmann]

HI, I know that Windows 2000 & 2003 comes with a CA. If I set this
up does this mean I no longer need to purchase Certs from a CA
company like Verisign?

No, because:

If so how do I get around the error meassage that will come up
on the browser that say that the Cert is not from a known CA?

You don't get aroudn it because you are not a known CA. people trust
only known CAs, you're nto one, so people don't automatically trust
you.

Would you trust "John Doe's CA" if you don't know John Doe?

 

[Simon Chambers]

No, because:


You don't get aroudn it because you are not a known CA. people trust
only known CAs, you're nto one, so people don't automatically trust
you.

Would you trust "John Doe's CA" if you don't know John Doe?

They are providing the same security though, so if trust isn't an issue (EG
for an intranet) then they will do the job.

Simon

 

[Guest]

Thank you. I thought maybe I can register my CA with a higher CA .

Thanks Again.

Firenet

 

[sherwin de claro]

if that's what you want, then you could be a sub-CA of a root-CA like
Verisgin.



sherwin de claro