Slashdot Mirror


Creating Your Own CA

lisam writes "Rob Flickenger shows how to become your own Certificate Authority, and sign your own, or others', SSL certificates in this onlamp.com article. (He also manages to mention fnords and deny responsiblity for the Microsoft Corporation cert snafu.)"

1 of 31 comments (clear)

  1. Re:This is important, but... by Sloppy · · Score: 5, Insightful
    No one can really answer that, because there isn't any way for Grandma to know whether or not she can trust a CA. Even if it's the big guys or if it comes with her browser. I mean, from Grandma's point of view, who the hell is Verisign and what did they ever do to merit trust? At best they're just some faceless corporation she's never heard of or dealt with. A cracker CA named "Integro-Trust Digital Signature National Registry (Fidelity Verified)" would have an even better-looking name than "Verisign."

    I don't think you can have real trust without users understanding how things work. Grandma is screwed.

    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.