OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [OT] SSL Cert recommendation

From: Jason Fesler (jfeslergigo.com)
Date: Sat May 17 2008 - 20:42:22 CDT


> What's wrong with self-signed certificates? They work just fine for SMTP,
> nobody checks SMTP certificate validity withour prior agreement with
> specific sites. The vast majority of SMTP certs are self-signed.

Two of the mobile apps I've used do complain (treo's SnapperMail, and
iPhone's Mail.app). For desktop, Apple's Mail.app does complain if the
keys are self signed (unless you take great efforts to muck with Apple's
certificate stuff).

Besides, you can use the same certificate on your web server.. :-)