Re: [cobalt-users] Secure Server : Sign your own cert

[Gordon <root@xxxxxxxxxxxxxxxxxxxxxxx>]

On Tue, 16 May 2000, Aeron Jarrett wrote:
> Greetings!	
> Since we can create our own certificates and sign them ourselves for a
> year, I wanted to know if it was illegal for us to use said certificates
> without getting them signed by a CA?

It's not illegal, unless you are fraudulentlt pretending they are signed
by a CA , but they are kinda useless for e-commerce, end users have to
accept the cert before they can use it, and most browsers give a LOT of
warning messages and alerts before allowing the user to accept them, most
users are going to be afraid to use them, they also defeat the entire
purpose of a signed cert which is to assure the customer that you are in
fact who you claim to be...

They are usefull ffor point to point encryption however, which is really
why they are provided...for example if you want to access stuff securely 
yourself, you can make your own cert and accept it yourself..

CA's don't charge *that* much do they ? ;0
> 
> I know this sound cheap but we're just startin' out... just lookin' for
> suggestions...