Re: OT - Dig Sigs
This WebDNA talk-list message is from 2004
It keeps the original formatting.
numero = 59633
interpreted = N
texte = Larry Hewitt wrote: > I was afraid of that. Verisign has one like this for $400 > > A bit of an impediment to a broadening of digital signature usage. The problem is largely that there is no incentive for them to bring down the price (just because there are multiple suppliers doesn't automatically provide market pressure). All of these code-signing certificates involve the CA (Certificate Authority) performing some sort of due-diligence to verify your identity, which Verisign has failed at in the past: http://news.com.com/2100-1001-254586.html?legacy=cnet and then investing in the certificate hold some portion of their own authority to sign certificates. There are open source ways to do this (GPG keysigning), but I don't think that asking the client to use some sort of shared key server to validate your signature will fly (even if Adobe supported it). The whole security certificate business is a disaster from end to end and to a large extent, that can be placed squarely on Verisign's shoulders for taking every opportunity to squander the promise of the technology. John -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748 ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Larry Hewitt wrote: > I was afraid of that. Verisign has one like this for $400 > > A bit of an impediment to a broadening of digital signature usage. The problem is largely that there is no incentive for them to bring down the price (just because there are multiple suppliers doesn't automatically provide market pressure). All of these code-signing certificates involve the CA (Certificate Authority) performing some sort of due-diligence to verify your identity, which Verisign has failed at in the past: http://news.com.com/2100-1001-254586.html?legacy=cnet and then investing in the certificate hold some portion of their own authority to sign certificates. There are open source ways to do this (GPG keysigning), but I don't think that asking the client to use some sort of shared key server to validate your signature will fly (even if Adobe supported it). The whole security certificate business is a disaster from end to end and to a large extent, that can be placed squarely on Verisign's shoulders for taking every opportunity to squander the promise of the technology. John -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748 ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
John Peacock
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
More Applescript (1997)
sort without the or a (1998)
[writefile] (1997)
problems with 2 tags (1997)
Re requiredFields parameter (1998)
Loss in Form (1998)
Updating a database once per day - An example (1998)
Extracting URL (2007)
Hierarchy of form/text/math variables (2000)
Weird Math and SV Bad News (1997)
[delete] problem (1997)
Search (1997)
Email Set-Up? (1997)
Search in 2 or more catalogs (1997)
SiteEdit NewFile.html ? (1997)
WebMerchant and Mac Auth Hub Help Please (1999)
Plugin or CGI or both (1997)
[WebDNA] New request for websites that currently run WebDNA (2009)
Email within tmpl ? (1997)
Running 2 two WebCatalog.acgi's (1996)