<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On 11/03/2008 12:54 PM, Ben Laurie:<br>
<blockquote
cite="mid:1b587cab0811030254t28497be6s5ed1368ad4901eb5@mail.gmail.com"
type="cite">
<pre wrap="">There are two cases. In one case, I just want to prove I'm the same
guy as last time. In this case, a client cert without any further
validation is fine. In fact, a self-signed cert is all that's needed,
no requirement for a CA - in fact, this is exactly what a Cardspace
self-issued card is.
</pre>
</blockquote>
<br>
If you are fine with the first guy - whoever it might be, then yes. <br>
<br>
<blockquote
cite="mid:1b587cab0811030254t28497be6s5ed1368ad4901eb5@mail.gmail.com"
type="cite">
<pre wrap="">
In the other case I want to prove I'm someone in particular (e.g. Ben
Laurie, Google employee) - in this case I need to prove who I am in
order to obtain the certificate. One way to do this is, as you say, to
demonstrate ownership of an email address - and if everything works
right, perhaps the email you send to "prove" that will not be
intercepted en route.</pre>
</blockquote>
<br>
No, email validation hardly says anything about you - it only proves
control over the email account, but not that you are Ben Laurie nor
that you are a Google employee. One might assume, that if you've got a
google.com email address, then well, you might be an employee at
Google. But it's somewhat vague...<br>
<br>
Reminds me about some Google employee contacting me the other day with
some inquiry or job offer ...and I thought it was a phishing attempt.
The email wasn't signed nor any other indication which would let me
clearly know, that this is somebody really working at Google. :S<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, <a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>Jabber: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Phone: </td>
<td>+1.213.341.0390</td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>