[conspire] question about "thawte" - how secure are websites covered by thawte

Ehud Kaldor ehud.kaldor at gmail.com
Fri Sep 4 21:39:09 PDT 2009


i'm not, and don't call me Surely...

E


On Fri, Sep 4, 2009 at 8:25 PM, Tony Godshall <tony at of.net> wrote:

> ...
> >> the biggest advantage of VeriSign (or Thwate, for that matter) is that
> the
> >> browsers know them (their CA is noted as a trusted one in most browsers
> [or
> >> is it the OS?]), which prevent the visitor to get the unpleasant/scary
> >> message that 'the authority for this certificate is unknown' and force
> the
> >> user to manually accept the cert.
> >
> > Right.  The value of one's cert being signed by a major CA is all about
> > not raising questions with the users.  It really has nothing to do with
> > security.
>
> Surely you are not saying it's... "security theater"?
>
> _______________________________________________
> conspire mailing list
> conspire at linuxmafia.com
> http://linuxmafia.com/mailman/listinfo/conspire
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://linuxmafia.com/pipermail/conspire/attachments/20090904/70149a45/attachment.html>


More information about the conspire mailing list