[olug] CA Cert Web Of Trust

[Rob Townley]

On Wed, Jul 29, 2009 at 5:17 PM, Rob Townley<rob.townley at gmail.com> wrote:
> On Wed, Jul 29, 2009 at 4:31 PM, T. J. Brumfield<enderandrew at gmail.com> wrote:
>> Firefox is saying the cert is fine here. Is your time and date set
>> correctly on your PC?
>
> CaCert is not included in browsers because CaCert hasn't paid the fee
> to have a security audit done.  Unless your distribution or your
> version of Firefox includes it (CentOS and Fedora 9 do not).
> http://www.cacert.org/index.php?id=3
> At some point, there has to be verification that a certificate
> representing X is actually coming from X.  That takes time which is
> money.

But since many large financial organizations are not trustworthy or at
least have made major mistakes with confidential data, i am beginning
to think wot could be more secure.  Social Media sites and wot could
make it more reliable and secure than the high paid certs.


>
>>
>> -- T. J. Brumfield
>>
>> On Wed, Jul 29, 2009 at 4:25 PM, Adam Lassek<adam at doubleprime.net> wrote:
>>> Just went to their website and my browser warned me that their certificate
>>> wasn't trusted... what was it they do, again?
>>>
>>> On Wed, Jul 29, 2009 at 11:25 AM, Shawn L. Djernes <shawn at djernes.org>wrote:
>>>
>>>> -----BEGIN PGP SIGNED MESSAGE-----
>>>> Hash: SHA1
>>>>
>>>> Hi All,
>>>>
>>>> Has anyone thought about having a "Signing Party" as part of a meeting?
>>>>
>>>> CA Cert http://cacert.org provides **FREE** SSL Certificates, but to
>>>> be able to have a certificate valid for a year you must have a WOT
>>>> (Web of Trust) level of 50 or above.
>>>>
>>>> Does anyone know anyone (besides me) who is a member of CA Cert?  Do
>>>> they have an Assurance Level to Verify Others?
>>>>
>>>> Also how about signing of GPG Keys?
>>>>
>>>>
>>>> Thanks,
>>>> Shawn
>>>> -----BEGIN PGP SIGNATURE-----
>>>> Version: GnuPG v1.4.7 (MingW32)
>>>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>>>>
>>>> iD8DBQFKcHfjyF1ZojV7+hoRAvrzAJoDcGEqJcXPMqCr4N3snvPUPp8FWACgh1a3
>>>> V24tz9k/yl4i2MfMuPwpznc=
>>>> =ucWB
>>>> -----END PGP SIGNATURE-----
>> _______________________________________________
>> OLUG mailing list
>> OLUG at olug.org
>> https://lists.olug.org/mailman/listinfo/olug
>>
>