RE: Using Netsite Commerce Server with non-RSA certificate?

• To: www-security@ns2.rutgers.edu, Jamey Maze <jnm@ornl.gov>
• Subject: RE: Using Netsite Commerce Server with non-RSA certificate?
• From: Bob Denny <rdenny@netcom.com>
• Date: Mon, 5 Jun 95 09:10:27 PDT

Jamey --

I'm a neophyte in this area so far, so caveat the following:

Netscape's browser accepts only "real" Netscape certificates. Imagine 
what would happen if "anyone" could run a server that successfully 
communicated with Netscape Navigator? The average person won't check
the "Document info" and examine the certification of the server, so
if I ran a bandit server, hijaacked B of A's IP address, then put up
a bogus credit card application, I'd have a field day.

Netscape and RSA carefully control the issuance of certificates that
are acceptable to the Navigator.

  -- Bob

• Previous: Re: Any Implementation of S-HTTP available
• Next: Re: Using Netsite Commerce Server with non-RSA certificate?
• Index(es):
  • Index
  • Thread