<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
<br>
On 12/07/2008 08:16 PM, Peter Williams:<br>
<blockquote
cite="mid:BFBC0F17A99938458360C863B716FE4639819AE83F@simmbox01.rapnt.com"
type="cite">
<div class="Section1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Why
is the Foundation (or a sponsor) not running openssl, and
its own CA, so as not to appear biased to any particular CA services
vendor?</span></p>
</div>
</blockquote>
<br>
Oh no, Peter, no way. Self-signed certificates don't provide any
protection at all, period. See <a class="moz-txt-link-freetext" href="https://blog.startcom.org/?p=125">https://blog.startcom.org/?p=125</a><br>
<br>
<blockquote
cite="mid:BFBC0F17A99938458360C863B716FE4639819AE83F@simmbox01.rapnt.com"
type="cite">
<div class="Section1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Of
course, we all know why. Certain CA services vendors-only
solutions make SSL configuration viable (whereas open source-principled
SSL service
tend to be being rejected by consumers (e.g. cacert.org)).</span></p>
</div>
</blockquote>
<br>
Give me a break....not going to argue here at OpenID about the use of
CAcert, but it's basically crap! Not even worth the digital paper those
certs are issued on. And their relying parties agreement is worse than
anything else I've seen in this industry so far. Even worse than
Verisign! Neither does CAcert represent Open Source (sick) nor anything
open at all. Read their subscriber agreement, my friend, educate
yourself!<br>
<br>
<blockquote
cite="mid:BFBC0F17A99938458360C863B716FE4639819AE83F@simmbox01.rapnt.com"
type="cite">
<div class="Section1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">If
folks want an introduction to cacert.org (a non vendor
class of SSL/CA services), it’s easy to arrange. Its all built on
openssl., and operates as a non-profit. </span></p>
</div>
</blockquote>
<br>
Peter, I'm surprised hearing such endorsement from you. Or an
endorsement at all.<br>
<br>
<blockquote
cite="mid:BFBC0F17A99938458360C863B716FE4639819AE83F@simmbox01.rapnt.com"
type="cite">
<div class="Section1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Understand
that the enduser experience of
foundation-showcase of openid for members will go down in quality
considerably,
tho – when you throw out whichever evil CA service vendor is being
Foundation-endorsed,
today.</span></p>
</div>
</blockquote>
<br>
You just did the same hereby!<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, <a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>Jabber: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Phone: </td>
<td>+1.213.341.0390</td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>