Issuing CA's is pretty easy. If you were using Lotus' Domino, you'd find
that it does this out of the box. And the CA's issued are great for your
own use in recognizing the people to whom you granted a CA. You can
almost look at them as really secure cookies.
On the other hand issuing CAs that other people will recognize is an
entirely different story. That's more akin to printing money, that is
issuing a paper certificate that can be used in the conduct of trade. When
you issue that kind of CA, someone asks to be trusted in a transaction,
pointing to you as the agent certifying that they are who they claim to
be. Well, for that, you need to have stature, e.g., a government, or a
government certified operator, like a major bank, etc. It is certainly
unlikely that a CA issued by an individual, or small, non-regulated
enterprise would carry any weight at all. Except with itself, of course.
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
