Slashdot Mirror


Does Your Company Use a PKI Solution?

punkrokk asks: "I am doing an Independent study of the feasibility of a Microsoft Certificate Services PKI in a distributed company. So far, it appears from my research that MS has the best supported implementation of a X.509 based PKI solution, for the Windows environment. While there are a few major weaknesses in a X.509 Public Key Infrastructure, one of which being Certificate Revocation Lists, using one is better than nothing. You do get a tangible security benefit, in addition to doing switch port authentication, and VPN quarantines. The problem is the cost of implementation is pretty steep, from the planning side. What do you guys do for dual factor authentication? Has anyone had Verisign sign their Certificate Authority? If you have implemented a MS Certificate Service infrastructure, I would appreciate your comments."

2 of 171 comments (clear)

  1. YUO FAIL IT? by Anonymous Coward · · Score: -1, Flamebait
  2. Yes... hmmm... by EmagGeek · · Score: -1, Flamebait

    Yes... My employer wants me to implement some kind of authentication for network security. I have no idea what I am doing, so do you guys think you can tell me what to do? I don't have a budget for consultants, and I'm incompetent at my job, so if you guys could steer me in the right direction, I'd really appreciate it...

    Am I the only one who is tired of free-work trolling on slashdot? Are the editors really so blind to what these folks are doing? FFS... really...

    *scroll*

    Oh wait, apparently, I'm not the only one... mod me extremely redundant...