<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On 01/26/2009 06:18 PM, Peter Williams:
<blockquote
cite="mid:BFBC0F17A99938458360C863B716FE463981B171B2@simmbox01.rapnt.com"
type="cite">
<pre wrap="">I'll hazard a guess he used one from his own firm: <a class="moz-txt-link-freetext" href="http://www.startcom.org">http://www.startcom.org</a>
</pre>
</blockquote>
<br>
<a class="moz-txt-link-freetext" href="https://eddyn.startssl.com/">https://eddyn.startssl.com/</a><br>
<br>
<blockquote
cite="mid:BFBC0F17A99938458360C863B716FE463981B171B2@simmbox01.rapnt.com"
type="cite">
<pre wrap="">
Be interesting to discover if a "trust issue" is what underlies the sudden inability to interwork.
</pre>
</blockquote>
<br>
Well, if that's the case it really sucks if once every while we have to
complain to get all commonly used and known CAs to work.<br>
<br>
<blockquote
cite="mid:BFBC0F17A99938458360C863B716FE463981B171B2@simmbox01.rapnt.com"
type="cite">
<pre wrap="">
More generally, users of vanity URL may encounter this "suddent cessation of inteworking issue" quite often, given the nature of the consumer-initiated discovery process used by openid. There, the RP may reject the SSL cert of the vanity site, assuming as per good practice it follows up and check if the CA has issued a revocation notice. This revocation will stop discovery, and probably manifest to the user as "RP cannot use OP/openid", even though probably the certs at the delegates OPs are fine.
</pre>
</blockquote>
<br>
Right. However I guess that most don't perform revocation checking,
specially on the Apache platform.<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, <a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>Jabber: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Phone: </td>
<td>+1.213.341.0390</td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>