OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [OT] SSL Cert recommendation

From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Sat May 17 2008 - 21:02:07 CDT


On Sat, May 17, 2008 at 10:12:59PM -0300, Arturo 'Buanzo' Busleiman wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Victor Duchovni wrote:
> | What's wrong with self-signed certificates? They work just fine for SMTP,
> | nobody checks SMTP certificate validity withour prior agreement with
> | specific sites. The vast majority of SMTP certs are self-signed.
>
> I have certain requirements.

In that case, buy the cheapest certs the peers who will be verifying them
are willing to trust. At the end of the day a cert is just a binding of
a public key to a domain name, signed by a party the verifier trusts, the
rest is marketing.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.