You can also snag the apache/ssl webserver and set one up for yourself, to see what it looks like. Non-commercial use only, as limited by the RSAREF license. The SSL webserver on c2.org is "verisign blessed", so you can't use it for testing. (Hm, someone should think up a suitably derisive term of that..)
Alex Strasheim wrote:
Basicly when the browser finds a new CA that it does know about it promts the user and through a series of dialog boxes the user chooses to trust it or not.
Is anyone running an ssl web server that would let us see how this works?
A little bird pointed me toward https://www.secret.org. I have no idea who they are...
--Jeff
-- Jeff Weinstein - Electronic Munitions Specialist Netscape Communication Corporation jsw@netscape.com - http://home.netscape.com/people/jsw Any opinions expressed above are mine.
-- sameer Voice: 510-601-9777 Community ConneXion FAX: 510-601-9734 The Internet Privacy Provider Dialin: 510-658-6376 http://www.c2.org/ (or login as "guest") sameer@c2.org