CFP: PKI research workshop

[D. A. Honig]

At 10:49 AM 1/12/02 -0800, Carl Ellison wrote:
>
>If that's not good enough for you, go to https://store.palm.com/
>where you have an SSL secured page.  SSL prevents a man in the middle
>attack, right?  This means your credit card info goes to Palm
>Computing, right?  Check the certificate.
>

More demos: You can create your own cert with TinySSL, a lightweight ( <
100Kbyte) 
server for Wintel, http://www.ritlabs.com/tinyweb/tinyssl.html
and amuse your friends if they bother to read
the info there.  Using trademarks (RSA, Verisign, etc.) in the fields
would escape most.  Or, as the TinySSL docs advise, you can get a free
cert from Thawte --which *in fact* certifies only that you can receive
email at the address you gave them.

As others have written, great for enabling SSL's confidentiality, nothing
else.






---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com