Re: [certid] open issue: self-signed certs

Kurt Zeilenga <Kurt.Zeilenga@Isode.com> Sun, 11 April 2010 23:55 UTC

From: Kurt Zeilenga <Kurt.Zeilenga@Isode.com>
In-Reply-To: <4BC0A605.3030004@corry.biz>
Date: Sun, 11 Apr 2010 16:55:13 -0700
Message-Id: <6E7AAEB9-0241-4CB0-ABA9-13C49E3530CA@Isode.com>
References: <20100317134327.GA14163@eltex.net> <4BA1A532.9090107@stpeter.im> <20100318045825.GA14076@eltex.net> <4BB3C447.7000505@stpeter.im> <4BBA575C.9040902@isode.com> <4BBF5601.1090905@stpeter.im> <4BC0A605.3030004@corry.biz>
To: Bil Corry <bil@corry.biz>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Cc: certid@ietf.org
Subject: Re: [certid] open issue: self-signed certs
Precedence: list

On Apr 10, 2010, at 9:23 AM, Bil Corry wrote:
> 
> 
> How about the scenario where a company acts as its own CA for internal systems; i.e. their root cert is installed across their entire enterprise and is effectively a CA for those browsers.  Is that in or out of scope for this document? 

I think why a client might choose to trust or not trust a CA is out of scope of the I-D. 

-- Kurt

[certid] It is not always a good idea to enforce … ArkanoiD
Re: [certid] It is not always a good idea to enfo… Peter Saint-Andre
Re: [certid] It is not always a good idea to enfo… ArkanoiD
Re: [certid] It is not always a good idea to enfo… Joe Orton
Re: [certid] It is not always a good idea to enfo… Bruno Harbulot
Re: [certid] It is not always a good idea to enfo… Bil Corry
Re: [certid] It is not always a good idea to enfo… Peter Saint-Andre
Re: [certid] It is not always a good idea to enfo… Alexey Melnikov
[certid] open issue: self-signed certs Peter Saint-Andre
Re: [certid] open issue: self-signed certs Bil Corry
Re: [certid] open issue: self-signed certs Kurt Zeilenga
Re: [certid] open issue: self-signed certs Bruno Harbulot
Re: [certid] It is not always a good idea to enfo… Michael Ströder