Netscape security

[Adam Shostack]

| > >        There is no word as to how to become a KSA.  Netscpe has
| > >ignored the question on several occaisons.
| > 
| > I'm fairly sure that I remember Taher saying at the W3C security
| > meeting that they intend to do this, and that hardcoding the CA's
| > into the library was as quick hack.  I also have the impression
| > that they don't know how to do it, but my recollection is fuzzier there.
| 
|   It has been stated publicly several times that we do plan to allow
| user configurable certificate authority and server trust.  A user
| will be able to configure their browser to talk to servers that have
| certificates signed by any CA they choose to trust.

	But I think I can work cheaper than Verisign.  What do I have
to do to get set up as a KCA today?


Adam

-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume