NODE c6c4b076WWW servers.
Black Unicorn <unicorn@schloss.li>Fri, 7 Jun 1996 21:21:35 +0800
Does there currently exist a system which permits webservers to restrict
access to clients who have a given certification?
What is the current certification practice?
How easy is it to certify a given client?
Are webserver certifications sufficently secure today?
What are the best servers to use for secure web pages and certification
currently in the United States?
---
My preferred and soon to be permanent e-mail address:unicorn@schloss.li
"In fact, had Bancroft not existed, potestas scientiae in usu est
Franklin might have had to invent him." in nihilum nil posse reverti
00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information
Opp. Counsel: For all your expert testimony needs: jimbell@pacifier.com
NODE f2c3e795Re: WWW servers.
sameer@c2.orgFri, 7 Jun 1996 22:30:28 +0800
>
> Does there currently exist a system which permits webservers to restrict
> access to clients who have a given certification?
Yup.
>
> What is the current certification practice?
Use either VeriSign, or build your own CA.
>
> How easy is it to certify a given client?
Rather easy, using XCert Sentry.
>
> Are webserver certifications sufficently secure today?
"sufficiently" by whose definition?
>
> What are the best servers to use for secure web pages and certification
> currently in the United States?
=) Stronghold: The Apache-SSL-US, coupled with XCert
Sentry. What else?
--
Sameer Parekh Voice: 510-601-9777x3
Community ConneXion, Inc. FAX: 510-601-9734
The Internet Privacy Provider Dialin: 510-658-6376
http://www.c2.net/ (or login as "guest") sameer@c2.net
NODE 3a7d7397Re: WWW servers.
"S. Logan vonBernhardi" <unicorn@schloss.li>Fri, 7 Jun 1996 15:27:28 +0800
On Thu, 6 Jun 1996 sameer@c2.org wrote:
> >
> > Does there currently exist a system which permits webservers to restrict
> > access to clients who have a given certification?
>
> Yup.
I was hoping you'd chime in.
How about for macs?
>
> >
> > What is the current certification practice?
>
> Use either VeriSign, or build your own CA.
"Build your own CA" ?
> >
> > How easy is it to certify a given client?
>
> Rather easy, using XCert Sentry.
Hmmm, how's it done? Included with the Apache package?
> >
> > Are webserver certifications sufficently secure today?
>
> "sufficiently" by whose definition?
Yours.
> >
> > What are the best servers to use for secure web pages and certification
> > currently in the United States?
>
> =) Stronghold: The Apache-SSL-US, coupled with XCert
> Sentry. What else?
Got a marketing package around?
> --
> Sameer Parekh Voice: 510-601-9777x3
> Community ConneXion, Inc. FAX: 510-601-9734
> The Internet Privacy Provider Dialin: 510-658-6376
> http://www.c2.net/ (or login as "guest") sameer@c2.net
---
My preferred and soon to be permanent e-mail address:unicorn@schloss.li
"In fact, had Bancroft not existed, potestas scientiae in usu est
Franklin might have had to invent him." in nihilum nil posse reverti
00B9289C28DC0E55 E16D5378B81E1C96 - Finger for Current Key Information
Opp. Counsel: For all your expert testimony needs: jimbell@pacifier.com
NODE 6507789dRe: WWW servers.
sameer@c2.orgFri, 7 Jun 1996 16:36:57 +0800
>
> I was hoping you'd chime in.
> How about for macs?
I think WebStar/SSL does SSL, but I don't know if it does
client auth. I doubt it though. Netscape Navigator 3.0b4 does client
auth, if you need a client that runs on a mac.
>
> "Build your own CA" ?
Yeah, my package (and XCert Sentry) has stuff to let your
build your own CA, for your own company, or whatever.
> Hmmm, how's it done? Included with the Apache package?
>
Xcert Sentry is a seperate product, sold by a seperate
company. http://www.xcert.com/
>
> Got a marketing package around?
Not yet. http;//www.us.apache-ssl.com/ for now.
--
Sameer Parekh Voice: 510-601-9777x3
Community ConneXion, Inc. FAX: 510-601-9734
The Internet Privacy Provider Dialin: 510-658-6376
http://www.c2.net/ (or login as "guest") sameer@c2.net