[H-GEN] Key-signing at Humbug: Saturday, 1st March 2003

[Robert Brockway]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

On 24 Feb 2003, Jason Parker-Burlingham wrote:

> [ Humbug *General* list - semi-serious discussions about Humbug and     ]
> [ Unix-related topics. Posts from non-subscribed addresses will vanish. ]
>
> Robert Brockway <robert at timetraveller.org> writes:
>
> > On Mon, 24 Feb 2003, Raymond Smith wrote:
> > > [3] Of course, Mark Suter himself requires no authentication as he is
> > >     inimitable. :-)
> > Does this mean Mark is self signed? :)
>
> Of course, everyone's key should be self-signed.  Right?

In my experience that term usually refers only to a Root certificate.  So
if you self sign you are setting yourself up as a root CA.

Interestingly, I am considering doing exactly this.  I wish to have https
access back to my own boxes.  Rather then pay for a certificate to be
signed, I may just generate a certificate using openssl and use it to sign
certificates for my web server, MTA, etc.  When Mozilla flags a warning
about not being able to verify the certificate from Robert Brockway, I'll
say "It's ok, I trust him".

This works because the primary clients of the system (my family & myself)
already know who I am, they don't need a 3rd party like Verisign to vouch
for me.

Rob

-- 
Robert Brockway B.Sc. email: robert at timetraveller.org  ICQ: 104781119
Linux counter project ID #16440 (http://counter.li.org)
"The earth is but one country and mankind its citizens" -Baha'u'llah


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/