Cheap/free CA would mean nothnig but transfer of identification trust from say Verisign to unknown/poorly managed/not certified CA. What are advantages? None. The new risk of trusting unknown party is introduced.
The only public alternative for commercial CA I see is self signed cert. In this case trust is transfered to client, the client can decide weather to trust or not. Even more, client can save web server certificate in the sertificate storage for further reference and compare it with current later on.
Any CA would have clear advantage: CRL's. If somebody would use them.
Slashdot Mirror
Cheap/free CA would mean nothnig but transfer of identification trust from say Verisign to unknown/poorly managed/not certified CA. What are advantages? None. The new risk of trusting unknown party is introduced.
The only public alternative for commercial CA I see is self signed cert. In this case trust is transfered to client, the client can decide weather to trust or not. Even more, client can save web server certificate in the sertificate storage for further reference and compare it with current later on.
Any CA would have clear advantage: CRL's. If somebody would use them.