Are there any free Certificate Authorities for SSL? I've got a Stronghold server running, and I don't particularly want to pay Verisign/Thawte's high prices, but I do want to be able to do real SSL. I've set up my own CA, and given myself my own cert., but having the same server you're interacting with being the one that's the CA for the transaction leaves the setup open to man-in-the-middle attacks (I'd think, at least...). So, who do I turn to for a cert.? I don't need amazingly trusted or trustworthy security -- maybe just some third party whose site is unlikely to have been compromised, etc... Please respond by email: I've moved to coderpunks, and so won't see replies on cypherpunks. thanks, -sq
I don't think that their CA software is free, but they do have a free demo version. http://www.xcert.com -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. Defeat the Demopublican Unity Party. Vote no on Clinton/Dole in November. Vote Harry Browne for President. On Sun, 3 Nov 1996, Sam Quigley wrote:
Are there any free Certificate Authorities for SSL?
[...]
Lucky Green wrote: | I don't think that their CA software is free, but they do have a free demo | version. http://www.xcert.com SSLeay provides CA tools. Adam -- "Every year the Republicans campaign like Libertarians, and then go to Washington and spend like Democrats." Vote Harry Browne for President. http://www.harrybrowne96.org
Sam Quigley wrote:
I've set up my own CA, and given myself my own cert., but having the same server you're interacting with being the one that's the CA for the transaction leaves the setup open to man-in-the-middle attacks (I'd think, at least...).
It's up to the user (at least with the Netscape Navigator) to decide what CA certificates or particular server certificates to trust. Self-signed certificates are logically at the root of any certificate chain. PK -- Philip L. Karlton karlton@netscape.com Principal Curmudgeon http://www.netscape.com/people/karlton Netscape Communications Corporation Everything should be made as simple as possible, but not simpler. -- Albert Einstein
participants (4)
-
Adam Shostack -
Lucky Green -
Philip L. Karlton -
Sam Quigley