[nycbug-talk] USENIX + CACert

Bob Ippolito bob
Fri Jun 11 12:26:53 EDT 2004


Use http://www.joar.com/certificates/ shows you how to do it with 
Thawte certs.. it should be the same, beyond the web page stuff.

-bob

On Jun 11, 2004, at 12:07 PM, Chris Coleman wrote:

> Ok, I have my cert from CAcert.  Now who is going to write me an quick 
> explanation of how to install it on Mail.app in my ibook?
>
> (An article is in order on setting this up on BSD and ibooks.)
>
> On Jun 10, 2004, at 11:05 AM, Bob Ippolito wrote:
>
>> I don't think I'm going to be able to make USENIX this year, but one 
>> thing I've heard about that particularly interests me is that the 
>> whole CAcert crew is going to be there.  CAcert is the 
>> "Community-Oriented and Driven Certificate Authority".  Basically, 
>> they're trying to do what Thawte, Verisign, etc. does, but offer the 
>> services for free.  They offer email, server, and most recently code 
>> signing certificates.
>>
>> The 'problem' with CAcert (other than the fact that operating systems 
>> don't yet trust its root cert by default), is that in order to be 
>> fully authorized (get 2 year certs, name on email cert, etc.) you 
>> need to be verified by an existing member with assurer (or better) 
>> status.  Unfortunately, there aren't ANY assurers in the NYC area!  
>> Since these are the board members, anyone certified by them is 
>> immediately granted assurer status.  So, for those of you going, it 
>> would be awesome if you signed up for CAcert and got yourself 
>> assured, and we could have a little "key-signing party" at the end of 
>> the next nycbug meeting.  If three nycbug members become assured by 
>> board members, then that is enough to assign >100 points to new 
>> people, who can then assure each other, so that nycbug'er (who wants 
>> it) should be able to end up with full assurer status (assuming 
>> there's about 6 people who are interested, possibly less if I do the 
>> math).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2357 bytes
Desc: not available
Url : http://lists.nycbug.org/pipermail/talk/attachments/20040611/3713d729/attachment.bin 



More information about the talk mailing list