Re: e-mail and digital ID's (signing and encrypting)

On Wednesday 22 August 2007 15:59:18 Ed Heron wrote:
>   We've got a certificate for our domain.  We should be able to produce
> individual 'digital ID's for employees.  I realize this doesn't make
> additional money for the CA's, but we'll leave the philosophy out of it
> for the moment, ok?  If we were to pay for digital ID's for all
> employees, at $20/year/employee, it could quickly get out of control. 
> I'm not going to get approval to spend $1600/year on it.  I can barely
> get approval for $500 for a multiple server certificate for our web farm.

First of all, never pay for certs, it's not worth it and doesn't give you 
*any* added technical or security benefits.

If you are doing S/MIME, be your own CA, or use CAcert: 

http://www.cacert.org/

If you are smarter and are doing OpenPGP:

http://www.ietf.org/rfc/rfc2440.txt
http://www.gnupg.org/
... etc ...

-- 
Wesley J. Landaker <[email protected]> <xmpp:[email protected]>
OpenPGP FP: 4135 2A3B 4726 ACC5 9094  0097 F0A9 8A4C 4CD6 E3D2

_______________________________________________
NMLUG mailing list
[email protected]
http://lists.b9.com/cgi-bin/mailman/listinfo/nmlug

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQBGzNu+8KmKTEzW49IRAigqAJ90xtwVQK+VhhIMalYuiNjtmfZ9MgCbB5+l
KzRzw/EDuXkkVd+xCTGFwO0=
=yYe5
-----END PGP SIGNATURE-----