<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
John Wang wrote:
<blockquote
cite="mid:6c4422320707130045w7fb2a7aq641be78b022e8e0c@mail.gmail.com"
type="cite"><br clear="all">
<br>
In the PKI world, the mega-CAs are embedded in the browsers that
automatically trust those CAs on behalf of the users, with most users
not even realizing the browser ISV is making a trust decision for them.
I've been wondering if there's anything wrong with CAs like CAcert that
provide free certs to just provide encryption, as opposed to
authentication. I see mega-IDPs like mega-CAs and do-it-yourself IDPs
like CAcert.
</blockquote>
Yes, there is something wrong with it and you should ask yourself, why
CAcert isn't in any browser at all....just ask the Mozilla folks about
it...If you need digital certification for low-assurance and encryption
purpose only you can get them for free from StartCom:
<a class="moz-txt-link-freetext" href="http://cert.startcom.org/">http://cert.startcom.org/</a> (Class 1, one year valid).<br>
<br>
<div class="moz-signature">-- <br>
<div><font face="Arial" size="2">Regards</font></div>
<div><font face="Arial" size="2"> </font></div>
<div><font face="Arial" size="2">Signer: Eddy Nigg, StartCom Ltd.</font></div>
<div><font face="Arial" size="2">Jabber: <a class="moz-txt-link-abbreviated" href="mailto:startcom@startcom.org">startcom@startcom.org</a></font></div>
<div><font face="Arial" size="2">Phone: +1.213.341.0390</font></div>
</div>
</body>
</html>