NODE dce32bafRe: Netscape security
harveyrj@vt.edu (R. J. Harvey)Fri, 18 Aug 95 07:11:45 PDT
On the subject of Netscape:
Now that Netscape is making the Commerce Server available
for free to students, faculty, libraries, etc. (i.e., groups
with limited ability to cough-up $290 to RSA to get the
1-year digitially-signed certificate needed to make it operate
in "secure mode"), does anyone know of alternative methods for
producing such certificates?
rj
------------------------------------------------------
R. J. Harvey
email: harveyrj@vt.edu
WWW site for job analysis
& personality research: http://harvey.psyc.vt.edu/
PGP key at http://harvey.psyc.vt.edu/RJsPGPkey.txt
NODE 6b1c8436Re: Netscape security
Alex Tang <altitude@cic.net>Fri, 18 Aug 95 08:08:47 PDT
On Fri Aug 18 10:11:07 1995: you scribbled...
>
> On the subject of Netscape:
> Now that Netscape is making the Commerce Server available
> for free to students, faculty, libraries, etc. (i.e., groups
> with limited ability to cough-up $290 to RSA to get the
> 1-year digitially-signed certificate needed to make it operate
> in "secure mode"), does anyone know of alternative methods for
> producing such certificates?
are you sure that this is a commerce server? Last I saw, It was only the
Communications server (doesn't have SSL). I could be wrong though.
...alex...
NODE ba6de38fRe: Netscape security
adam@bwh.harvard.edu (Adam Shostack)Fri, 18 Aug 95 08:15:02 PDT
To clear up some apparent confusion: The Commerce server is
not the certificate. The NSCP Commerce Server is an httpd.
Non-profits and educationals still need to pay Verisign for a
certificate. They do not need to pay NSCP for a $5,000 web server.
The certificates must be signed by an approved key signing
agency. Anyone can produce one; to get it to interact 'securely' with
free netscape browsers you need the certificate to be signed.
There is no word as to how to become a KSA. Netscpe has
ignored the question on several occaisons.
Adam
| On the subject of Netscape:
| Now that Netscape is making the Commerce Server available
| for free to students, faculty, libraries, etc. (i.e., groups
| with limited ability to cough-up $290 to RSA to get the
| 1-year digitially-signed certificate needed to make it operate
| in "secure mode"), does anyone know of alternative methods for
| producing such certificates?
--
"It is seldom that liberty of any kind is lost all at once."
-Hume
NODE 79a1c38fRe: Netscape security
sameer <sameer@c2.org>Fri, 18 Aug 95 08:34:20 PDT
> The certificates must be signed by an approved key signing
> agency. Anyone can produce one; to get it to interact 'securely' with
> free netscape browsers you need the certificate to be signed.
>
> There is no word as to how to become a KSA. Netscpe has
> ignored the question on several occaisons.
>
It is interesting that in order for me to use the commerce
server on an *internal* application I am working on, my project
*still* needed to get the key signed by verisign, even though no one
outside of the company i am working for will have access to the
commerce server my application is running on.
--
sameer Voice: 510-601-9777
Network Administrator FAX: 510-601-9734
Community ConneXion: The NEXUS-Berkeley Dialin: 510-658-6376
http://www.c2.org (or login as "guest") sameer@c2.org