Re: Netscape security
On the subject of Netscape: Now that Netscape is making the Commerce Server available for free to students, faculty, libraries, etc. (i.e., groups with limited ability to cough-up $290 to RSA to get the 1-year digitially-signed certificate needed to make it operate in "secure mode"), does anyone know of alternative methods for producing such certificates? rj ------------------------------------------------------ R. J. Harvey email: harveyrj@vt.edu WWW site for job analysis & personality research: http://harvey.psyc.vt.edu/ PGP key at http://harvey.psyc.vt.edu/RJsPGPkey.txt
To clear up some apparent confusion: The Commerce server is not the certificate. The NSCP Commerce Server is an httpd. Non-profits and educationals still need to pay Verisign for a certificate. They do not need to pay NSCP for a $5,000 web server. The certificates must be signed by an approved key signing agency. Anyone can produce one; to get it to interact 'securely' with free netscape browsers you need the certificate to be signed. There is no word as to how to become a KSA. Netscpe has ignored the question on several occaisons. Adam | On the subject of Netscape: | Now that Netscape is making the Commerce Server available | for free to students, faculty, libraries, etc. (i.e., groups | with limited ability to cough-up $290 to RSA to get the | 1-year digitially-signed certificate needed to make it operate | in "secure mode"), does anyone know of alternative methods for | producing such certificates? -- "It is seldom that liberty of any kind is lost all at once." -Hume
The certificates must be signed by an approved key signing agency. Anyone can produce one; to get it to interact 'securely' with free netscape browsers you need the certificate to be signed.
There is no word as to how to become a KSA. Netscpe has ignored the question on several occaisons.
It is interesting that in order for me to use the commerce server on an *internal* application I am working on, my project *still* needed to get the key signed by verisign, even though no one outside of the company i am working for will have access to the commerce server my application is running on. -- sameer Voice: 510-601-9777 Network Administrator FAX: 510-601-9734 Community ConneXion: The NEXUS-Berkeley Dialin: 510-658-6376 http://www.c2.org (or login as "guest") sameer@c2.org
On Fri Aug 18 10:11:07 1995: you scribbled...
On the subject of Netscape: Now that Netscape is making the Commerce Server available for free to students, faculty, libraries, etc. (i.e., groups with limited ability to cough-up $290 to RSA to get the 1-year digitially-signed certificate needed to make it operate in "secure mode"), does anyone know of alternative methods for producing such certificates?
are you sure that this is a commerce server? Last I saw, It was only the Communications server (doesn't have SSL). I could be wrong though. ...alex...
participants (4)
-
adam＠bwh.harvard.edu -
Alex Tang -
harveyrj＠vt.edu -
sameer