Re: verisign certificate
- From: David Schwartz <davids@xxxxxxxxxxxxx>
- Date: 30 Oct 2007 18:39:16 -0700
On Oct 30, 6:10 am, vertigo <tekn...@xxxxxxxxxxxxxx> wrote:
You cannot do this. Each certificate is specific to the hostname of the
server where it resides. Specifically, the certificate is assurance that
the server is the one which it claims to be.
Why ? I could buy one certificate which will be used for my CA.
You can't because, as it says above, each certificate is specific to
the hostname of the server where it resides.
Then i would be able to create as many certificates as i want using my CA.
And what would stop you from issuing a "www.microsoft.com" or
"www.amazon.com" certificate and loading malicious code onto people's
computers or stealing their credit card numbers? You cannot just
become a CA by sending $20 to someone.
DS
.
- References:
- verisign certificate
- From: vertigo
- Re: verisign certificate
- From: Llanzlan Klazmon the 15th
- Re: verisign certificate
- From: vertigo
- Re: verisign certificate
- From: Dave Uhring
- Re: verisign certificate
- From: vertigo
- verisign certificate
- Prev by Date: Re: Port Mirroring in Linux
- Next by Date: Re: Troubleshooting connection loss (novice question)
- Previous by thread: Re: verisign certificate
- Next by thread: Re: verisign certificate
- Index(es):
Relevant Pages
|