[ILUG] Re: summary ? - SSL certs on clusters

[Paul Jakma]

On Fri, 9 Jan 2004, pbm wrote:

> it depends on the browser, of course :) 
> try it for yourself:
> 
> https://mail.investici.org/     - this is a cert signed by a non-known
>                                   certification authority
> https://www.ecn.org/            - this is a self-signed certificate                                  

Hmm... no, I mean a certificate signed by a key which itself has its 
cert signed by a CA.

Though, the browser only has CA cert and cert the current HTTPS 
server is presenting to it, there's no protocol to retrieve unknown 
certs.

This sounds like a job for DNS doesnt it? :)

regards,
-- 
Paul Jakma	paul at clubi.ie	paul at jakma.org	Key ID: 64A2FF6A
	warning: do not ever send email to spam at dishone.st
Fortune:
A great nation is any mob of people which produces at least one honest
man a century.