Re: S/MIME publishing mailing list
Paul Hoffman <[email protected]> Fri, 23 Jan 2015 11:20:20 -0800
| Newsgroups | gmane.ietf.smime |
|---|---|
| Message-ID | <[email protected]> |
On Jan 23, 2015, at 11:15 AM, Phillip Hallam-Baker <[email protected]> wrote: > What you describe is a CA in that it issues certs. ...and also has a directory of the issued certs. > Much better to have a low fidelity CA than no CA at all. Definitely. Maybe DANE will be a solution, but there is very little energy there. > Comodo is currently providing free S/MIME certs to individuals which is inside the PKIX model. So is StartSSL. However, the problem that Michael would then have is how many places he should look for a cert for [email protected]. And what to do if he sees two overlapping but disagreeing certs when he looks in multiple places. Nothing new here. --Paul Hoffman _______________________________________________ smime mailing list [email protected] https://www.ietf.org/mailman/listinfo/smime